Executive brief
Vibe-Trading is an AI-driven trading platform that uses 'swarms' to manage automated trading tasks. A security flaw in how the system handles task identifiers allows an attacker with access to the tool interface to manipulate file paths. This could lead to the corruption or overwriting of internal configuration files, potentially disrupting trading operations or causing the system to process incorrect data.
Technical details
A path traversal vulnerability exists in Vibe-Trading's swarm storage logic (agent/src/swarm/store.py). The `run_dir` function constructs filesystem paths by joining a base directory with a caller-supplied `run_id` without proper sanitization or validation. An attacker with access to the Model Context Protocol (MCP) swarm tools can provide a crafted `run_id` (e.g., using '../' sequences) to access or overwrite `run.json` files outside the designated `.swarm/runs` directory. While the impact is limited to locations containing parseable `run.json` files, it allows for unauthorized modification of swarm artifacts and state. The issue is fixed in version 0.1.10 by enforcing that run identifiers are bare strings without path separators.
Affected products
- HKUDS Vibe-Trading < 0.1.10
Timeline
- 2026-06-18: patched: Fix merged in pull request #258
- 2026-06-19: advisory: Official release of v0.1.10 containing the fix
- 2026-06-30: disclosed: CVE-2026-58171 published