Log in Start free

ByteDance

Products

ProductCVEsExploitedLatest
Coze Scraper Extension1–Sep 23, 2026
coze-studio1–Apr 26, 2026
deer-flow1–Apr 17, 2026
InfiniStore1–Jun 5, 2026
UI-TARS-desktop1–Aug 27, 2026
verl1–Apr 23, 2026

Exploited and recent CVEs

  • CVE-2026-96680 Medium 4.3 ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization 0.4%
  • CVE-2026-81735 Critical 10.0 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution 0.8%
  • CVE-2026-11312 Low 3.3 bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity 0.1%
  • CVE-2026-7023 Medium 6.3 ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection 0.4%
  • CVE-2026-6878 Medium 5.6 ByteDance verl grader.py math_equal sandbox 0.3%
  • CVE-2026-40518 High 7.1 ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode 0.4%