Sandbox Escape Vulnerability in ByteDance Deer-Flow Bash Tool

CVE-2026-34430

What is CVE-2026-34430?

The Deer-Flow application by ByteDance has a vulnerability that allows attackers to escape its sandbox environment by exploiting flawed bash tool handling. By bypassing regex-based validation using shell features, attackers can change directories and use relative paths to execute arbitrary commands on the host system. This issue stems from incomplete shell semantics modeling, which permits unauthorized access to files outside of the designated sandbox boundary. Through subprocess invocation and enabled shell interpretation, this vulnerability could result in significant security risks.

References