The vulnerability in bytebot‑ai arises from insufficient validation of file path parameters used by the computer_write_file function. By sending a specially crafted path, an attacker can cause the system to execute arbitrary code, leading to remote code execution. This flaw is an instance of OS command injection (CWE‑78).

Affected systems include any installations of bytebot‑ai that contain commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 or earlier. The issue exists in the code base prior to any later corrective commit, so all versions built from that commit are vulnerable until the path handling is properly sanitized. The product is maintained under the bytebot‑ai repository on GitHub, and the vulnerability was identified in a commit dated 2025‑09‑11.

The risk assessment reflects a CVSS score of 9.8, indicating critical severity, while the EPSS score is less than 1 %, suggesting a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Attackers would need to deliver a crafted path string to the vulnerable function, likely through an exposed API or command interface, which implies that systems with publicly reachable endpoints are at greatest risk. Immediate patching or mitigation is advised to prevent potential remote code execution.