{"metadata": {"vulnerability": "CVE-2026-77930", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-21T17:52:36.079Z", "date_only": false, "value": "2026-08-21T17:52:36.079Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-77930", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-77930", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-20T00:46:10.763Z", "date_only": false, "value": "2026-10-20T00:46:10.763Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77930", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T01:17:02.111Z", "date_only": false, "value": "2026-10-20T01:17:02.111877Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117470594433031020", "record": "cve-2026-77930", "field": "creation_timestamp", "uuid": "3e33365a-30fd-4166-a48f-40bc0a16c960", "content": "CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_async_task and runs commands with user privileges and environment secrets.\nhttps://www.cve.org/CVERecord?id=CVE-2026-77930https://www.lasso.security/vulnerability-database/cve-2026-77930https://github.com/EvoScientist/EvoScientist/issues/387https://github.com/EvoScientist/EvoScientist/commit/d249e320bd856a7d31d859cfbb2bf75bab6c8686https://github.com/EvoScientist/EvoScientist/releases/tag/v0.2.5https://github.com/EvoScientist/EvoScientist/blob/ac58caab7bdd1706f3fee55891f611cd175d05b0/EvoScientist/subagents/_factory.py#L116https://www.vulncheck.com/advisories/evoscientist-0.1.0-before-0.2.5-human-approval-bypass-via-async-sub-agents#EvoScientist#CVE_2026_77930#bot", "url": "https://infosec.exchange/users/cve/statuses/117470594433031020"}, {"timestamp": "2026-10-20T01:17:19Z", "date_only": false, "value": "2026-10-20T01:17:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-626G-HX6F-FJ54", "record": "GHSA-626G-HX6F-FJ54", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T01:17:19.360Z", "date_only": false, "value": "2026-10-20T01:17:19.360", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77930", "record": "FKIE_CVE-2026-77930", "field": "published"}, {"timestamp": "2026-10-20T03:32:45Z", "date_only": false, "value": "2026-10-20T03:32:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-626G-HX6F-FJ54", "record": "GHSA-626G-HX6F-FJ54", "field": "published"}, {"timestamp": "2026-10-20T03:32:45Z", "date_only": false, "value": "2026-10-20T03:32:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-626G-HX6F-FJ54", "record": "GHSA-626G-HX6F-FJ54", "field": "modified"}, {"timestamp": "2026-10-20T16:04:30.973Z", "date_only": false, "value": "2026-10-20T16:04:30.973347Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77930", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T16:04:30.973Z", "date_only": false, "value": "2026-10-20T16:04:30.973347Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77930", "record": "FKIE_CVE-2026-77930", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T16:07:39.227Z", "date_only": false, "value": "2026-10-20T16:07:39.227Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77930", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-22T21:09:21.545Z", "date_only": false, "value": "2026-10-22T21:09:21.545Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-77930", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-22T21:09:21.545Z", "date_only": false, "value": "2026-10-22T21:09:21.545Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-77930", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-22T22:18:45.743Z", "date_only": false, "value": "2026-10-22T22:18:45.743", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77930", "record": "FKIE_CVE-2026-77930", "field": "lastModified"}]}