ByteDance DeerFlow contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation. The vulnerability exists before commit 2176b2b where agent name validation is bypassed. Attackers can supply traversal-style values or absolute paths as the agent name to influence directory creation. This allows writing files outside the intended custom-agent directory. The vulnerability potentially enables arbitrary file write on the system subject to filesystem permissions. The issue has been addressed in the specified commit.