EvoScientist vulnerabilities
We track 1 vulnerability in EvoScientist products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest EvoScientist vulnerabilities
- 9.8 Critical severity
EvoScientist: Missing Authorization
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched