Bytebot
Monthly
Infinite loop denial-of-service in bytebot 0.0.1's Agent Execution Workflow can be triggered remotely by a low-privileged attacker, exhausting server resources and disrupting service availability. The product is end-of-life and no longer maintained by bytebot-ai, meaning no official patch will be released. A public proof-of-concept exploit is available on GitHub, lowering the bar for exploitation despite the moderate CVSS 4.0 score of 5.3.
Infinite loop denial-of-service in bytebot 0.0.1's Agent Execution Workflow can be triggered remotely by a low-privileged attacker, exhausting server resources and disrupting service availability. The product is end-of-life and no longer maintained by bytebot-ai, meaning no official patch will be released. A public proof-of-concept exploit is available on GitHub, lowering the bar for exploitation despite the moderate CVSS 4.0 score of 5.3.