CVE-2026-78250 is a vulnerability in bytebot-ai bytebot 0.0.1, specifically in an unknown function of the Agent Execution Workflow, leading to an infinite loop. The vulnerability has a CVSS score of 2.1 and is considered low severity. The attack may be performed remotely, and the exploit is publicly available. However, this vulnerability only affects products that are no longer supported by the maintainer.
A critical vulnerability was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11). The vulnerability allows attackers to execute arbitrary code via a crafted path to `computer_write_file`. This issue is classified as CWE-78 and has a CVSS score of 9.8, indicating a high severity level. The CVE record was published on 2026-07-21T21:16:49.370Z and has not been modified si [truncated]
