HKUDS Vibe-Trading: Missing authentication in FastAPI server enables RCE
Summary
Vibe-Trading versions from 0.1.0 before 0.1.7 do not enforce authentication on the FastAPI server when API_AUTH_KEY is not set. An unauthenticated remote attacker can post messages to the session API, which can cause the LLM agent to run shell commands through BashTool, typically as root inside the container. Attackers can also upload .py or .sh files, read session histories and obtain partial API keys.
Affected
- HKUDS Vibe-Trading (PyPI package vibe-trading-ai) from 0.1.0 before 0.1.7
- Default configuration with API_AUTH_KEY unset
- Shipped Docker image runs as root (no USER directive)
Fixed in
- Upgrade to version 0.1.7 or later
- Fix commit: 9454d4a27a763b80e1d6eb5763b86c88e9e4e714
Workaround
- Set API_AUTH_KEY (note: read endpoints may still expose session history even when the key is set; unverified whether 0.1.7 fixes this)
- Run the container as a non-root user
- Restrict network access to trusted IP addresses and keep the service off public interfaces
Exploitation
- No known exploitation in the wild found in the sources reviewed; not verified against the CISA KEV catalogue
- CISA SSVC: exploitation status 'poc', automatable: yes, technical impact: total
- The public GitHub advisory contains detailed reproduction notes, lowering the effort required to exploit
Our recommendation
- Inventory all Vibe-Trading instances, including Docker containers and developer machines, and check for versions >=0.1.0 and <0.1.7
- Upgrade to 0.1.7 or later and review the other findings in the GitHub advisory GHSA-v2f8-6655-7grj against the new version
- Remove any internet exposure and restrict access to trusted hosts
- Rotate LLM and broker keys stored in the tool if an exposed instance was found
- Monitor the GitHub advisory and NVD for updates, as the NVD record is currently deferred
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-v2f8-6655-7grj github.com
- VulnCheck advisory: HKUDS Vibe-Trading before 0.1.7 www.vulncheck.com
- OSV GHSA-v2f8-6655-7grj osv.dev
- GitLab Advisory Database: vibe-trading-ai GHSA-v2f8-6655-7grj advisories.gitlab.com
- CVEReports: GHSA-V2F8-6655-7GRJ cvereports.com
- HOL Guard: CVE-2026-114108 hol.org
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 01:02.
Original description (NVD)
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because require_auth() returns early when API_AUTH_KEY is unset. Attackers can post messages to /sessions/{id}/messages to trigger root shell commands via BashTool, upload .py or .sh files via /upload, read session histories, and obtain partial API keys.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.