SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-30631

CRITICAL · CVSS 9.8 EPSS 0.50% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

A critical vulnerability in bytebot-ai allows attackers to execute arbitrary code by exploiting a crafted path to the `computer_write_file` function. This flaw poses a significant risk to any systems utilizing this software, potentially leading to unauthorized access and control. Organizations using bytebot-ai should prioritize immediate remediation to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
gist.github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-30631
Severity
CRITICAL
CVSS
9.8
EPSS
0.50%

Original NVD Description

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to `computer_write_file`.