Executive Summary

This vulnerability exists in ByteDance DeerFlow before commit 2176b2b and involves a path traversal and arbitrary file write issue during the bootstrap-mode custom-agent creation process.

The problem arises because the validation of the agent name can be bypassed, allowing attackers to supply traversal-style values or absolute paths as the agent name.

This manipulation influences directory creation and enables writing files outside the intended custom-agent directory.

As a result, attackers may achieve arbitrary file write on the system, subject to filesystem permissions.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with limited privileges to write files anywhere on the filesystem where the application has write permissions.

Such arbitrary file write can lead to serious impacts including the possibility of executing malicious code, modifying or deleting important files, or disrupting system operations.

The overall impact depends on the filesystem permissions and the environment in which ByteDance DeerFlow is running.

Useful 0 Not Useful 0