Cpe:2.3:a:evoscientist:evoscientist:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aevoscientistevoscientist/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 20 Oct 2026 02:32:12 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCVE-2026-77930 - Approval Bypass and Command Execution in EvoScientisthttps://feed.craftedsignal.io/briefs/2026-10-evoscientist-bypass/Tue, 20 Oct 2026 02:32:12 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-evoscientist-bypass/EvoScientist versions 0.1.0 through 0.2.4 contain an approval bypass vulnerability enabling attackers to execute arbitrary shell commands via unsanitized content ingestion.EvoScientist versions 0.1.0 through 0.2.4 are susceptible to an approval bypass vulnerability (CVE-2026-77930) that allows unauthenticated or remote attackers to achieve command execution. The flaw exists because the software fails to implement an interrupt_on gate when delegating tasks to asynchronous sub-agents. By planting malicious instructions within ingested content - such as external web pages - an attacker can trick the EvoScientist agent into invoking the start_async_task function. This results in the execution of arbitrary shell commands with the privileges and environment secrets of the user running the agent. This vulnerability is significant because it grants an attacker direct access to sensitive credentials and the ability to interact with the underlying host filesystem and network.

Impact

Successful exploitation allows for full command execution on the host machine. In enterprise environments where the EvoScientist agent is configured with high-privilege service accounts or has access to sensitive API keys and environment variables, this vulnerability could lead to total system compromise, data exfiltration, or lateral movement within the network.

Recommendation

  • Upgrade EvoScientist to version 0.2.5 or later immediately to patch the missing interrupt_on gate logic.
  • Restrict the privileges of the service account running the EvoScientist agent to the minimum necessary for its intended tasks.
  • Implement egress filtering to prevent the agent from fetching arbitrary or untrusted external web content.
]]>highadvisoryvulnerabilityremote-code-execution