Willem Jiang

Name of the Vulnerable Software and Affected Versions ByteDance Deer-Flow versions prior to commit 92c7a20 Description ByteDance Deer-Flow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling. This allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory changes and relative paths. Attackers can exploit incomplete shell semantics modeling to read and modify files outside the sandbox boundary and achieve arbitrary command execution through subprocess invocation with shell interpretation enabled. Recommendations Update ByteDance Deer-Flow to commit 92c7a20 or later.

**Name of the Vulnerable Software and Affected Versions** ServiceComb ServiceCenter versions 1.x.x through 1.x.x **Description** The issue is caused by improper configuration, leading to a Directory Traversal problem in ServiceCenter. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the fact that improper configuration can cause the problem. **Recommendations** For versions 1.x.x, update to version 2.0.0 to resolve the issue. At the moment, there is no other information about additional mitigation measures.