Vulnerability · Published Oct 20, 2026 · Assigned by VulnCheck

CVE-2026-77930EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

Critical 9.8

In plain English

A critical-severity missing authorization in EvoScientist from EvoScientist. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.7%top 47.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_async_task and runs commands with user privileges and environment secrets.

Affected products (as reported)

Vendor	Product	Versions
EvoScientist	EvoScientist	0.1.0 – before 0.2.5

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Lasso.security Advisory technical-description, exploit
https://github.com/EvoScientist/EvoScientist/issues/387 issue-tracking
https://github.com/EvoScientist/EvoScientist/commit/d249e320bd856a7d31d859cfbb2bf75bab6c8686 patch
EvoScientist v0.2.5 Release Notes release-notes
https://github.com/EvoScientist/EvoScientist/blob/ac58caab7bdd1706f3fee55891f611cd175d05b0/EvoScientist/subagents/_factory.py#L116 technical-description
VulnCheck Advisory: EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents third-party-advisory