Login Request a demo
VI
Product
Vibe-Trading
by HKUDS · last CVE Oct 21, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 4Medium 2Low 0
Severity
All severities7Critical1High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vibe-Trading to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114107
8.8
1%
Oct 21
HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool
Affected: 0.1.0 before 0.1.7
CVE-2026-58170
8.3
1%
Jun 30
Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates
Affected: before 0.1.10
CVE-2026-114106
7.5
0%
Oct 21
HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path
Affected: 0.1.0 before 0.1.7
CVE-2026-58169
7.5
0%
Jun 30
Vibe-Trading < 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution
Affected: before 0.1.10
Showing 4