CVE-2026-30631

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

40th percentile - higher than 40% of all known CVEs

Summary

In the bytebot-ai project at commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11), a vulnerability allows attackers to execute arbitrary code via a crafted path to the computer_write_file function.

Risk Assessment

An attacker can remotely execute arbitrary code in the application context, potentially leading to full system compromise and data security breaches.

Recommendation

Update bytebot-ai to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to `computer_write_file`.