ByteDance vulnerabilities

Newest CVEs

• CVE-2026-96680

  ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization

  ByteDance · Coze Scraper Extension

  Medium5.3
• CVE-2026-81735

  UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

  bytedance · UI-TARS-desktop

  Critical10.0
• CVE-2026-11312

  bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity

  bytedance · InfiniStore

  Medium4.8
• CVE-2026-7023

  ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection

  ByteDance · coze-studio

  Medium5.3
• CVE-2026-6878

  ByteDance verl grader.py math_equal sandbox

  ByteDance · verl

  Medium6.3
• CVE-2026-40518

  ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

  bytedance · deer-flow

  High7.1