CVE-2026-30631 Details

A remote code execution vulnerability has been identified in Bytebot-AI, specifically in the Bytebot MCP tools, within the Docker deployment. This issue arises from improper handling of user-controlled input in the 'computer_write_file' function, allowing attackers to inject malicious paths that are executed as shell commands. The vulnerability is present in the latest commit as of February 8, 2026.

Users are advised to avoid using 'exec()' with shell command strings that incorporate user-controlled input. Instead, use 'execFile()' or 'spawn()' with argument arrays, or utilize native filesystem APIs for file operations. Additionally, remove or limit 'sudo' usage to the least privilege necessary, implement strict validation for the 'path' parameter to reject shell metacharacters and ensure it resolves to an allowlisted base directory, and add regression tests for malicious 'path' inputs.