HKUDS Vibe-Trading Path Traversal Vulnerability Exposes Sensitive Files

Executive Summary

CVE-2026-114106 is a path traversal vulnerability in HKUDS Vibe-Trading versions 0.1.0 to 0.1.7. It allows remote attackers to read sensitive server files through LLM agent tools like read_document and safe_user_path. These tools lack proper sandbox checks, enabling access to files such as /etc/shadow, /proc/self/environ, API keys, and /root credentials.

Useful 0 Not Useful 0

Detection Guidance

Check if the vulnerable versions (0.1.0 to 0.1.6) of HKUDS Vibe-Trading are installed by running: pip show vibe-trading-ai or pip list | grep vibe-trading-ai. Inspect the Docker container for the application by running docker ps to find the container ID, then docker exec -it <container_id> sh to check if it runs as root. Review logs for unauthorized file access attempts or error messages containing sensitive data like API keys or credentials.

Test for the vulnerability by attempting to access sensitive files via the API endpoint (port 8899) using curl commands like curl http://<target_ip>:8899/read_document?file=/etc/shadow or curl http://<target_ip>:8899/safe_user_path?path=/root/.env.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive files, including system credentials, API keys, and configuration files. Attackers can exploit it to steal credentials, access confidential data, or escalate privileges, potentially compromising the entire server.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability can lead to severe compliance violations under GDPR and HIPAA due to unauthorized access to sensitive data. It may result in data breaches, exposing personal or health information, leading to legal penalties, reputational damage, and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade HKUDS Vibe-Trading to version 0.1.7 or later immediately. Remove the Docker container and rebuild it with a non-root user directive in the Dockerfile. Tighten the safe_user_path function to use a strict allowlist of permitted directories and add sandbox checks to the read_document function.

Restrict network access to the API endpoint (port 8899) using firewalls or network policies. Monitor for any signs of exploitation, such as unauthorized file access attempts or data exfiltration.

Useful 0 Not Useful 0