CVE-2026-77930

EvoScientist versions 0.1.0 before 0.2.5 are vulnerable to an approval bypass that enables attackers to execute host shell commands. The root cause is the delegation of tasks to async sub-agents that lack an interrupt_on gate . Attackers can trigger this by planting malicious instructions in inge...