CVE-2026-77930 Details

A vulnerability in EvoScientist versions 0.1.0 prior to 0.2.5 allows for an approval bypass in asynchronous sub-agents. This flaw enables attackers to execute arbitrary shell commands on the host by exploiting the absence of an 'interrupt_on' gate in certain sub-agents. The vulnerability arises from the way async sub-agents are constructed and managed, particularly in the 'writing-agent' and 'data-analysis-agent' roles, which lack human approval pathways. The issue is exacerbated by the application's ingestion of untrusted web content, creating a vector for indirect prompt injection attacks that can manipulate the agent into executing harmful commands.

Users are advised to update EvoScientist to version 0.2.5 or later, where this vulnerability has been addressed. In the meantime, avoid using the 'auto-approve' feature and disable the 'execute' tool in asynchronous sub-agents by excluding it from the tools list or using a middleware that removes it.