CVE-2026-77930: EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents
Published Oct 20, 2026
·Updated
Affected Software
1 affected component
EvoScientist EvoScientist>=0.1.0<0.2.5
Event History
Oct 20, 2026
CVE Published
via MITRE·12:46 AM
Data Sourced
via MITRE·12:46 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions should be treated as affected?
EvoScientist version 0.1.0 through versions before 0.2.5 are affected. Version 0.2.5 is the first version identified as not affected.