HKUDS Vibe-Trading: Path traversal in LLM agent file-read tools
Summary
Vibe-Trading versions from 0.1.0 before 0.1.7 contain a path traversal flaw in the file-read tools used by the LLM agent, including read_document and tools gated by safe_user_path(). A remote attacker can prompt the agent to read sensitive server files such as /etc/shadow, /proc/self/environ, and /root credentials, including API keys and cloud keys. According to the advisory, the FastAPI server can be reached without authentication, and the shipped container runs as root, which increases the impact.
Affected
- HKUDS Vibe-Trading (PyPI: vibe-trading-ai) from 0.1.0 before 0.1.7
- Shipped Docker container (runs as root, no USER directive)
Fixed in
- Version 0.1.7 (fix commit 9454d4a27a763b80e1d6eb5763b86c88e9e4e714 referenced by the advisory)
Workaround
- No vendor workaround for the traversal itself is known.
- Running the container as a non-root user reduces the impact of credential extraction but does not fix the traversal.
Exploitation
- Not marked as known exploited (CISA KEV: No).
- The GitHub advisory contains reproduction steps; no standalone public exploit repository was found.
- No in-the-wild reports found.
- CISA SSVC: exploitation none, automatable yes, technical impact partial.
Our recommendation
- Inventory all Vibe-Trading deployments, including Docker images and Python environments, and check for vibe-trading-ai below 0.1.7.
- Upgrade to version 0.1.7 or later.
- Check whether the API is reachable from outside and restrict access.
- Run the container as a non-root user as an additional measure.
- Rotate LLM provider and cloud keys if an affected instance was exposed.
- Review server logs for file-read requests against sensitive paths.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-5rmq-chc7-m22f github.com
- VulnCheck Advisory: Path Traversal via read_document and safe_user_path www.vulncheck.com
- OSV GHSA-5rmq-chc7-m22f osv.dev
- GitLab Advisory Database GHSA-5rmq-chc7-m22f advisories.gitlab.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 01:06.
Original description (NVD)
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agent file-read tools. Attackers can prompt the agent to invoke read_document, which lacks sandbox checks, or safe_user_path-gated tools to leak /etc/shadow, /proc/self/environ API keys, and /root credentials.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.