CVE-2026-114108: HKUDS Vibe-Trading missing authentication in FastAPI server

CVE-2026-114108 · Severity: critical · CVSS 9.8 · Published 2026-10-21

Vibe-Trading is an AI agent platform that processes natural-language requests and executes tools like shell commands and file operations. When the API authentication key is left unconfigured (the default state), the FastAPI server accepts requests from any network client without authentication. An attacker can post messages to trigger arbitrary commands executed as root, upload malicious files, read session histories, and extract partial API credentials.

Technologies: HKUDS Vibe-Trading. Vendors: HKUDS.

Quick answers

Is CVE-2026-114108 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-114108 being exploited in the wild.
How severe is CVE-2026-114108?
Critical severity, with a CVSS score of 9.8, published 21 October 2026.
Which products and versions are affected?
HKUDS Vibe-Trading 0.1.0 before 0.1.7.
Is there a fix for CVE-2026-114108?
Yes: fixed in 0.1.7. Until then: Set a strong API_AUTH_KEY value in the agent/.env configuration file before deploying; do not ship or run the server with API_AUTH_KEY commented out or unset. Additionally, restrict network access to the FastAPI port (default 8899) to trusted clients only via firewall or network isolation. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-114108 attacked?
It is attacked over the network.
Am I affected by CVE-2026-114108?
Check whether you run HKUDS Vibe-Trading at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: 0.1.7

Set a strong API_AUTH_KEY value in the agent/.env configuration file before deploying; do not ship or run the server with API_AUTH_KEY commented out or unset. Additionally, restrict network access to the FastAPI port (default 8899) to trusted clients only via firewall or network isolation.

Technical details

The require_auth() function in api_server.py returns early when API_AUTH_KEY environment variable is unset, making authentication a no-op; the endpoint POST /sessions/{id}/messages and others decorated with dependencies=[Depends(require_auth)] become unauthenticated when this occurs. Network clients can then drive the FastAPI surface to invoke BashTool (which runs shell=True commands as root, since the container has no USER directive), upload arbitrary files, and read session histories. No preconditions—the vulnerability exists by default in a clean installation.

Affected products

  • HKUDS Vibe-Trading 0.1.0 before 0.1.7

Timeline

  • 2026-07-29: disclosed
  • 2026-10-21: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.