Executive brief
bytebot is an AI agent execution platform that orchestrates automated workflows. A denial of service vulnerability in the Agent Execution Workflow component allows remote attackers to trigger infinite loops, potentially exhausting system resources and disrupting service availability. This affects the deprecated version 0.0.1, which is no longer maintained.
Technical details
The vulnerability is a denial of service (DoS) condition caused by improper handling of execution budgets in an unknown function within the Agent Execution Workflow component. The flaw allows remote attackers to manipulate agent execution parameters to trigger infinite loops, consuming CPU and memory resources. An attacker can exploit this without authentication by sending a specially crafted request to an exposed agent execution endpoint. The vulnerability is publicly disclosed and PoC code is available; however, it only affects the unmaintained version 0.0.1, and no patch is available from the maintainer.
Affected products
- bytebot-ai bytebot 0.0.1
Timeline
- 2026-08-24: disclosed
- other: Public PoC available on GitHub