| शीर्षक | Bytebot AI Bytebot 0.0.1 Denial of Service |
|---|
| विवरण | Bytebot has a denial of service vulnerability in its agent execution workflow.
A normal task prompt can cause the agent to repeatedly call the model and desktop tools. The backend continues scheduling new agent iterations until the model emits a terminal task status, but it does not enforce a maximum iteration count, tool-call count, wall-clock timeout, model-call budget, token/cost budget, child-task budget, or stored tool-result byte budget.
An attacker can submit a crafted task that keeps the agent in a model/tool loop. In shared or multi-user deployments, this can monopolize the agent execution pool, repeatedly consume model and desktop-tool resources, store growing tool results and screenshots, and keep legitimate follow-up tasks pending. This can cause task queue starvation, denial of wallet, database growth, and feature-level denial of service. |
|---|
| स्रोत | ⚠️ https://github.com/outlookgp/CVE/tree/main/Bytebot_Agent_Loop_Budget_DoS_Report |
|---|
| उपयोगकर्ता | outlookgp (UID 99658) |
|---|
| सबमिशन | 11/07/2026 11:44 AM (1 महीना पहले) |
|---|
| संयम | 24/08/2026 07:56 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 394599 [bytebot-ai bytebot 0.0.1 Agent Execution Workflow सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|