What’s Vulnerable › Products

HKUDS Vibe-Trading vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your HKUDS Vibe-Trading version is affected

Latest HKUDS Vibe-Trading vulnerabilities

• CVE-2026-114108 — HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE (CVSS 9.8)
• CVE-2026-114107 — HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool (CVSS 8.8)
• CVE-2026-114106 — HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path (CVSS 7.5)
• CVE-2026-58173 — Vibe-Trading < 0.1.10 - Path Traversal via Persistent Memory Type (CVSS 6.5)
• CVE-2026-58171 — Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier (CVSS 4.2)
• CVE-2026-58170 — Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates (CVSS 8.3)
• CVE-2026-58169 — Vibe-Trading < 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution (CVSS 7.5)