{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/evoscientist/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:evoscientist:evoscientist:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-77930"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["EvoScientist (\u003c 0.2.5)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution"],"_cs_type":"advisory","_cs_vendors":["EvoScientist"],"content_html":"\u003cp\u003eEvoScientist versions 0.1.0 through 0.2.4 are susceptible to an approval bypass vulnerability (CVE-2026-77930) that allows unauthenticated or remote attackers to achieve command execution. The flaw exists because the software fails to implement an interrupt_on gate when delegating tasks to asynchronous sub-agents. By planting malicious instructions within ingested content - such as external web pages - an attacker can trick the EvoScientist agent into invoking the start_async_task function. This results in the execution of arbitrary shell commands with the privileges and environment secrets of the user running the agent. This vulnerability is significant because it grants an attacker direct access to sensitive credentials and the ability to interact with the underlying host filesystem and network.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for full command execution on the host machine. In enterprise environments where the EvoScientist agent is configured with high-privilege service accounts or has access to sensitive API keys and environment variables, this vulnerability could lead to total system compromise, data exfiltration, or lateral movement within the network.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade EvoScientist to version 0.2.5 or later immediately to patch the missing interrupt_on gate logic.\u003c/li\u003e\n\u003cli\u003eRestrict the privileges of the service account running the EvoScientist agent to the minimum necessary for its intended tasks.\u003c/li\u003e\n\u003cli\u003eImplement egress filtering to prevent the agent from fetching arbitrary or untrusted external web content.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T02:32:12Z","date_published":"2026-10-20T02:32:12Z","id":"https://feed.craftedsignal.io/briefs/2026-10-evoscientist-bypass/","summary":"EvoScientist versions 0.1.0 through 0.2.4 contain an approval bypass vulnerability enabling attackers to execute arbitrary shell commands via unsanitized content ingestion.","title":"CVE-2026-77930 - Approval Bypass and Command Execution in EvoScientist","url":"https://feed.craftedsignal.io/briefs/2026-10-evoscientist-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - EvoScientist","version":"https://jsonfeed.org/version/1.1"}