Bytedance

6 CVEs across 7 Bytedance products. Browse Bytedance vulnerabilities, severities, and proof-of-concept exploits.

Bytedance products with known CVEs

ProductCVEs
Coze Scraper Extension1
Coze-Studio1
Deer-Flow1
Deerflow1
Infinistore1
Ui-Tars-Desktop1
Verl1
Bytedance CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-96680Medium4.32026-09-23A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.a…
CVE-2026-81735Critical10.02026-08-27startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpSe…
CVE-2026-11312Low3.32026-06-05A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the com…
CVE-2026-7023Medium6.32026-04-26A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/…
CVE-2026-6878Medium5.62026-04-23A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math/grader.py. The manipulation leads to s…
CVE-2026-40518High7.12026-04-17ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the age…