CVE-2026-78250: bytebot-ai bytebot Agent Execution Workflow infinite loop

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-24 · updated 2026-10-12
Weakness: CWE-404

Description

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

bytebot-ai bytebot: 0.0.1

References

https://github.com/outlookgp/CVE/tree/main/Bytebot_Agent_Loop_Budget_DoS_Report
https://vuldb.com/cve/CVE-2026-78250
https://vuldb.com/submit/886378
https://vuldb.com/vuln/394599
https://vuldb.com/vuln/394599/cti

Get alerted when CVE-2026-78250 or the next vulnerability affects your stack