A critical remote code execution vulnerability in bytebot-ai allows unauthenticated attackers to write arbitrary files and execute code on the host system.

The application fails to properly sanitize file paths passed to the computer_write_file function. This allows an unauthenticated attacker to write files to arbitrary locations, leading to arbitrary code execution on the underlying system.

With a critical CVSS score of 9.8, this vulnerability represents a severe risk of full system compromise. An attacker could gain persistent access, exfiltrate sensitive data, or disrupt business operations by overwriting critical system files, making immediate remediation essential for any environment running this software.

Immediate Action: Update the bytebot-ai software to at least commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313.

Proactive Monitoring: Monitor file system activity, specifically tracking writes to sensitive directories or unexpected file creation events initiated by the bytebot-ai process.

Compensating Controls: Restrict the service account permissions running bytebot-ai to the absolute minimum required, and implement file system integrity monitoring to detect unauthorized changes.

Public Exploit Available: No (no confirmed public exploit)

Given the critical nature of this vulnerability and the existence of a proof-of-concept, administrators should apply the fix immediately. The potential for unauthenticated remote code execution makes this a high-priority target for malicious actors.