Critical severity9.8NVD Advisory· Published Aug 26, 2024· Updated Apr 15, 2026

CVE-2024-45256

Description

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

blog.chebuya.com/posts/unauthenticated-remote-command-execution-on-byob/nvd
github.com/chebuya/exploits/tree/main/BYOB-RCEnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.041
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000