ByteDance vulnerabilities
We track 4 vulnerabilities in ByteDance products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2026.
Latest ByteDance vulnerabilities
- 10.0 Critical severity
UI-TARS-desktop: Missing Authentication for Critical Functionality
startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication midd
- 8.8 High severity
coze-studio: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/database_impl.go of the component databaseTool. Performing a manipulation results in
- 9.1 Critical severity
deer-flow: Improper Limitation of a Pathname to a Restricted Directory
ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is bypassed. Attackers can supply traversal-style values or absolute paths as the
- 9.6 Critical severity
DeerFlow: Incomplete List of Disallowed Inputs
ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory c