Code Injection in FinRobot v1.0.0

Executive Summary

CVE-2026-51917 is a code injection flaw in FinRobot v1.0.0 affecting the CodingUtils.modify_code method. The issue occurs because the method accepts file paths from LLM tool calls without validation. When FinRobot's autogen session is exposed via HTTP or an interactive interface, attackers can use prompt injection to manipulate the LLM into invoking modify_code with file paths outside the intended workspace, enabling arbitrary file modifications.

Useful 0 Not Useful 0

Detection Guidance

Check FinRobot logs for suspicious file modification attempts or unexpected tool invocations. Look for prompts containing path traversal sequences like ../ in the autogen session logs. Inspect file changes in directories outside the intended workspace, especially configuration files or application code.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to overwrite configuration files, inject backdoors, or corrupt application code by modifying files outside the intended workspace. If FinRobot is exposed via HTTP or an interactive interface, attackers could manipulate the LLM into executing malicious file modifications through prompt injection.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade FinRobot to a patched version if available. Implement strict input validation for file paths in CodingUtils.modify_code to reject paths outside the workspace. Restrict LLM tool invocation permissions to prevent unauthorized file modifications. Monitor file system changes and network traffic for signs of exploitation.

Useful 0 Not Useful 0