CVE-2026-77930

8.8High

Published 20 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash

8.8High

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required
Impact: Full C/I/A compromise
Weakness: CWE-862

Impact

Attackers can execute arbitrary shell commands with user privileges and steal environment secrets. To trigger this, an attacker must plant malicious instructions in ingested content, such as fetched web pages, that the agent processes.

Root cause

Async sub-agents spawned via start_async_task fail to enforce an interrupt_on gate, bypassing required human approval checks.

Affected systems

EvoScientist 0.1.0 before 0.2.5

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Fix & remediation

Upgrade EvoScientist to version 0.2.5 or later. If upgrading immediately is not possible, stop the agent from fetching untrusted web pages or parsing external content.

shell

$ pip install --upgrade evoscientist>=0.2.5

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_async_task and runs commands with user privileges and environment secrets.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-77930