EvoScientist vulnerabilities

CVEs whose affected-version data names the EvoScientist package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-77930High· 8.8

today

EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested …

▾ TwilightEvoScientist · EvoScientistvia CVEORG