Bytedance Deerflow — known CVE vulnerabilities

Every CVE whose affected-product data names Bytedance Deerflow, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-40518 — CVSS 7.1 (high): ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent…