DeerFlow vulnerabilities

2 known vulnerabilities in DeerFlow from ByteDance. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  deer-flow: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-40518Apr 17, 2026ByteDance

  ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name validation is bypassed. Attackers can supply traversal-style values or absolute paths as the

• 9.6 Critical severity

  DeerFlow: Incomplete List of Disallowed Inputs

  CVE-2026-34430Apr 1, 2026ByteDance

  ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory c