CVE-2026-77930 - EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents
CVE ID :CVE-2026-77930 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers...