# CVE-2026-114106: HKUDS Vibe-Trading path traversal in file-read tools

Source: https://junglewise.ai/threats/cve-2026-114106-hkuds-vibe-trading-from-0-1-0-before-0-1-7-contains-a-path  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-21. Updated: 2026-10-21  
License: CC BY 4.0 with a link back

CVE-2026-114106 · Severity: high · CVSS 7.5 · Published 2026-10-21

Vibe-Trading is an AI trading system that uses large language models with file-reading tools to process data. A path traversal vulnerability in the read_document and safe_user_path functions allows unauthenticated attackers to read sensitive files from the server, including system credentials (/etc/shadow), environment variables with API keys, and SSH keys (/root/.ssh/id_rsa). An attacker can exploit this by sending malicious prompts to the LLM agent, which then reads and returns sensitive data accessible to the container's root process.

Technologies: [HKUDS Vibe-Trading](https://junglewise.ai/threats/technologies/vibe-trading). Vendors: [HKUDS](https://junglewise.ai/threats/vendors/hkuds).

## Quick answers

**Is CVE-2026-114106 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-114106 being exploited in the wild.

**How severe is CVE-2026-114106?** High severity, with a CVSS score of 7.5, published 21 October 2026.

**Which products and versions are affected?** HKUDS Vibe-Trading 0.1.0 before 0.1.7.

**Is there a fix for CVE-2026-114106?** Yes: fixed in 0.1.7. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-114106 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-114106?** Check whether you run HKUDS Vibe-Trading at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 0.1.7

## Technical details

The vulnerability exists in two file-read tool functions: read_document() has no path sanitization and returns any file readable by the FastAPI process; safe_user_path() accepts any path under Path.home() or Path.cwd(), which resolve to /root and /app inside the shipped container, exposing credential files and environment variables. The LLM agent auto-discovers these tools and makes them callable without proper sandbox restrictions. Because the container runs as root with no USER directive, the process can access system files including /etc/shadow, /proc/self/environ, and credential files in /root and /app.

## Affected products

- HKUDS Vibe-Trading 0.1.0 before 0.1.7

## Timeline

- 2026-07-29: disclosed
- 2026-10-21: advisory

## References

- [https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-5rmq-chc7-m22f](https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-5rmq-chc7-m22f)
- [https://www.vulncheck.com/advisories/hkuds-vibe-trading-0.1.0-before-0.1.7-path-traversal-via-read-document-and-safe-user-path](https://www.vulncheck.com/advisories/hkuds-vibe-trading-0.1.0-before-0.1.7-path-traversal-via-read-document-and-safe-user-path)

## Related threats

- [HKUDS Vibe-Trading missing authentication in FastAPI server](https://junglewise.ai/threats/cve-2026-114108-hkuds-vibe-trading-from-0-1-0-before-0-1-7-contains-a-missing)
- [HKUDS Vibe-Trading indirect prompt injection in BashTool and BackgroundRunTool](https://junglewise.ai/threats/cve-2026-114107-hkuds-vibe-trading-from-0-1-0-before-0-1-7-contains-an-indirect)
- [Vibe-Trading FastAPI unauthenticated access and RCE chain](https://junglewise.ai/threats/vibe-trading-fastapi-endpoints-permit-unauthenticated-access-file-1d82990e)
- [HKUDS Vibe-Trading path traversal in persistent memory storage](https://junglewise.ai/threats/cve-2026-58173-hkuds-vibe-trading-path-traversal-in-persistent-memory-storage)
- [HKUDS Vibe-Trading path traversal in swarm run identifier](https://junglewise.ai/threats/cve-2026-58171-hkuds-vibe-trading-path-traversal-in-swarm-run-identifier)