CVE-2026-34430: ByteDance DeerFlow LocalSandboxProvider Host Bash Escape
ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory changes and relative paths. Attackers can exploit the incomplete shell semantics modeling to read and modify files outside the sandbox boundary and achieve arbitrary command execution through subprocess invocation with shell interpretation enabled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ByteDance DeerFlow LocalSandboxProvider Hostto a version that resolves this vulnerability.Patch 92c7a20
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34430?
The severity of CVE-2026-34430 is classified as critical due to its potential to allow arbitrary command execution on host systems.
How do I fix CVE-2026-34430?
To fix CVE-2026-34430, update ByteDance Deer-Flow to version 92c7a20 or later.
What types of systems are affected by CVE-2026-34430?
CVE-2026-34430 affects systems running ByteDance Deer-Flow versions prior to commit 92c7a20.
What kind of exploitation is possible with CVE-2026-34430?
An attacker can exploit CVE-2026-34430 to escape the sandbox and execute arbitrary commands on the host system.
Is a patch available for CVE-2026-34430?
Yes, a patch is included in ByteDance Deer-Flow version 92c7a20, which mitigates the vulnerability.