CVE-2026-114106: HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path

Q: Which deployments are exposed?

HKUDS Vibe-Trading versions from 0.1.0 through versions before 0.1.7 are affected. The issue is remotely exploitable and does not require authentication or user interaction.

Q: What does an attacker need to do to exploit this issue?

An attacker needs to prompt the LLM agent to invoke its file-read tools. The vulnerable paths include read_document, which lacks sandbox checks, and tools gated by safe_user_path.

Q: What information could be exposed?

The vulnerability can expose sensitive server files, including /etc/shadow, /proc/self/environ contents such as API keys, and root credentials.

Published Oct 21, 2026

Updated

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agent file-read tools. Attackers can prompt the agent to invoke readdocument, which lacks sandbox checks, or safeuserpath-gated tools to leak /etc/shadow, /proc/self/environ API keys, and /root credentials.

Affected Software

1 affected component

HKUDS Vibe-Trading>=0.1.0<0.1.7

Event History

Oct 21, 2026

CVE Published

via MITRE·12:37 AM

Data Sourced

via MITRE·12:37 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

HKUDS Vibe-Trading versions from 0.1.0 through versions before 0.1.7 are affected. The issue is remotely exploitable and does not require authentication or user interaction.

What does an attacker need to do to exploit this issue?

An attacker needs to prompt the LLM agent to invoke its file-read tools. The vulnerable paths include read_document, which lacks sandbox checks, and tools gated by safe_user_path.

What information could be exposed?