# HKUDS vulnerabilities Source: https://junglewise.ai/threats/vendors/hkuds Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/hkuds.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 46 vulnerabilities in HKUDS: 0 in the last 7 days and 20 in the last 90 days, 6 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114108, was published on 21 October 2026. 3 vulnerabilities in the last four weeks, down 80% on the four before (15). 1 critical against 2. 5 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 3 - Last 90 days: 20 - All time: 46 (6 critical, 0 exploited in the wild) ## About HKUDS The Data Science Lab at the University of Hong Kong. ## Latest HKUDS vulnerabilities - [CVE-2026-114108: HKUDS Vibe-Trading missing authentication in FastAPI server](https://junglewise.ai/threats/cve-2026-114108-hkuds-vibe-trading-from-0-1-0-before-0-1-7-contains-a-missing) (critical, CVSS 9.8, published 21 Oct 2026) - [CVE-2026-114107: HKUDS Vibe-Trading indirect prompt injection in BashTool and BackgroundRunTool](https://junglewise.ai/threats/cve-2026-114107-hkuds-vibe-trading-from-0-1-0-before-0-1-7-contains-an-indirect) (high, CVSS 8.8, published 21 Oct 2026) - [CVE-2026-114106: HKUDS Vibe-Trading path traversal in file-read tools](https://junglewise.ai/threats/cve-2026-114106-hkuds-vibe-trading-from-0-1-0-before-0-1-7-contains-a-path) (high, CVSS 7.5, published 21 Oct 2026) - [Vibe-Trading FastAPI unauthenticated access and RCE chain](https://junglewise.ai/threats/vibe-trading-fastapi-endpoints-permit-unauthenticated-access-file-1d82990e) (critical, CVSS 10, published 2 Oct 2026) - [CVE-2026-51881: DeepTutor code injection in shell execution tool](https://junglewise.ai/threats/cve-2026-51881-deeptutor-1-4-0-contains-code-injection-in-exectool-execute) (info, published 1 Oct 2026) - [CVE-2026-51880: deeptutor path traversal in EditFileTool.execute](https://junglewise.ai/threats/cve-2026-51880-deeptutor-1-4-0-contains-a-path-traversal-issue-in-editfiletool) (info, published 1 Oct 2026) - [CVE-2026-51879: DeepTutor authorization bypass in TutorBotManager file write](https://junglewise.ai/threats/cve-2026-51879-deeptutor-1-4-0-contains-an-authorization-bypass-through-a-user) (info, published 1 Oct 2026) - [CVE-2026-51878: DeepTutor authorization bypass in session regeneration](https://junglewise.ai/threats/cve-2026-51878-deeptutor-1-4-0-contains-an-authorization-bypass-through-a-user) (info, published 1 Oct 2026) - [CVE-2026-51876: DeepTutor authorization bypass in book confirmation](https://junglewise.ai/threats/cve-2026-51876-deeptutor-1-4-0-contains-an-authorization-bypass-vulnerability-in) (info, published 1 Oct 2026) - [CVE-2026-51870: DeepTutor command execution in ExecTool](https://junglewise.ai/threats/cve-2026-51870-deeptutor-v1-4-0-is-vulnerable-to-command-execution-in-tutorbot) (info, published 30 Sep 2026) - [CVE-2026-102874: HKUDS AnyTool command injection in Execute Endpoint](https://junglewise.ai/threats/cve-2026-102874-a-vulnerability-was-identified-in-hkuds-anytool-0-1-0-affected) (high, CVSS 7.3, published 30 Sep 2026) - [CVE-2026-85740: LightRAG SSRF via IPv6-transition address bypass in markdown image download](https://junglewise.ai/threats/cve-2026-85740-lightrag-ssrf-via-ipv6-transition-address-bypass-in-markdown) (high, CVSS 7.1, published 22 Sep 2026) - [CVE-2026-85734: lightrag-hku /login endpoint missing rate limiting enables brute-force attacks](https://junglewise.ai/threats/cve-2026-85734-lightrag-hku-login-endpoint-missing-rate-limiting-enables-brute) (critical, CVSS 9.1, published 22 Sep 2026) - [CVE-2026-85725: LightRAG plaintext password timing attack vulnerability](https://junglewise.ai/threats/cve-2026-85725-lightrag-plaintext-password-timing-attack-vulnerability) (medium, CVSS 5.9, published 22 Sep 2026) - [CVE-2026-85709: LightRAG API sensitive information exposure in error responses](https://junglewise.ai/threats/cve-2026-85709-lightrag-api-sensitive-information-exposure-in-error-responses) (medium, CVSS 5.3, published 22 Sep 2026) - [CVE-2026-92576: HKUDS nanobot server-side request forgery in WebFetchTool](https://junglewise.ai/threats/cve-2026-92576-hkuds-nanobot-server-side-request-forgery-in-webfetchtool) (high, CVSS 8.6, published 16 Sep 2026) - [CVE-2026-90809: HKUDS nanobot argument injection in shell command execution](https://junglewise.ai/threats/cve-2026-90809-hkuds-nanobot-argument-injection-in-shell-command-execution) (high, CVSS 7.3, published 14 Sep 2026) - [CVE-2026-90808: HKUDS nanobot incomplete blacklist in shell command execution](https://junglewise.ai/threats/cve-2026-90808-hkuds-nanobot-incomplete-blacklist-in-shell-command-execution) (medium, CVSS 6.3, published 14 Sep 2026) - [CVE-2026-86124: AutoAgent unauthenticated remote code execution in TCP server](https://junglewise.ai/threats/cve-2026-86124-autoagent-unauthenticated-remote-code-execution-in-tcp-server) (critical, CVSS 9.8, published 5 Sep 2026) - [CVE-2026-85030: HKUDS AI-Trader business logic error in selfRegister API](https://junglewise.ai/threats/cve-2026-85030-hkuds-ai-trader-business-logic-error-in-selfregister-api) (low, CVSS 3.7, published 3 Sep 2026) - [CVE-2026-61740: HKUDS LightRAG authentication bypass in API-key-only mode](https://junglewise.ai/threats/cve-2026-61740-hkuds-lightrag-authentication-bypass-in-api-key-only-mode) (critical, CVSS 4, published 15 Jul 2026) - [CVE-2026-61736: HKUDS LightRAG permissive CORS policy in API server](https://junglewise.ai/threats/cve-2026-61736-hkuds-lightrag-permissive-cors-policy-in-api-server) (critical, CVSS 9.3, published 15 Jul 2026) - [CVE-2026-58173: HKUDS Vibe-Trading path traversal in persistent memory storage](https://junglewise.ai/threats/cve-2026-58173-hkuds-vibe-trading-path-traversal-in-persistent-memory-storage) (medium, CVSS 6.5, published 30 Jun 2026) - [CVE-2026-58171: HKUDS Vibe-Trading path traversal in swarm run identifier](https://junglewise.ai/threats/cve-2026-58171-hkuds-vibe-trading-path-traversal-in-swarm-run-identifier) (medium, CVSS 4.2, published 30 Jun 2026) - [CVE-2026-58170: HKUDS Vibe-Trading path traversal in mandate proposal identifier](https://junglewise.ai/threats/cve-2026-58170-hkuds-vibe-trading-path-traversal-in-mandate-proposal-identifier) (high, CVSS 8.3, published 30 Jun 2026) ## Most severe HKUDS vulnerabilities - [Vibe-Trading FastAPI unauthenticated access and RCE chain](https://junglewise.ai/threats/vibe-trading-fastapi-endpoints-permit-unauthenticated-access-file-1d82990e) (critical, CVSS 10, published 2 Oct 2026) - [CVE-2026-86124: AutoAgent unauthenticated remote code execution in TCP server](https://junglewise.ai/threats/cve-2026-86124-autoagent-unauthenticated-remote-code-execution-in-tcp-server) (critical, CVSS 9.8, published 5 Sep 2026) - [CVE-2026-114108: HKUDS Vibe-Trading missing authentication in FastAPI server](https://junglewise.ai/threats/cve-2026-114108-hkuds-vibe-trading-from-0-1-0-before-0-1-7-contains-a-missing) (critical, CVSS 9.8, published 21 Oct 2026) - [CVE-2026-61736: HKUDS LightRAG permissive CORS policy in API server](https://junglewise.ai/threats/cve-2026-61736-hkuds-lightrag-permissive-cors-policy-in-api-server) (critical, CVSS 9.3, published 15 Jul 2026) - [CVE-2026-85734: lightrag-hku /login endpoint missing rate limiting enables brute-force attacks](https://junglewise.ai/threats/cve-2026-85734-lightrag-hku-login-endpoint-missing-rate-limiting-enables-brute) (critical, CVSS 9.1, published 22 Sep 2026) - [CVE-2026-61740: HKUDS LightRAG authentication bypass in API-key-only mode](https://junglewise.ai/threats/cve-2026-61740-hkuds-lightrag-authentication-bypass-in-api-key-only-mode) (critical, CVSS 4, published 15 Jul 2026) - [CVE-2026-40502: HKUDS OpenHarness command injection in gateway handler](https://junglewise.ai/threats/cve-2026-40502-hkuds-openharness-command-injection-in-gateway-handler) (high, CVSS 8.8, published 16 Apr 2026) - [CVE-2026-7551: HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote…](https://junglewise.ai/threats/cve-2026-7551-hkuds-openharness-contains-a-remote-code-execution-vulnerability) (high, CVSS 8.8, published 30 Apr 2026) - [CVE-2026-58168: HKUDS DeepTutor authorization bypass in MCP tool access](https://junglewise.ai/threats/cve-2026-58168-hkuds-deeptutor-authorization-bypass-in-mcp-tool-access) (high, CVSS 8.8, published 30 Jun 2026) - [CVE-2026-6819: HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin…](https://junglewise.ai/threats/cve-2026-6819-hkuds-openharness-prior-to-pr-156-remediation-exposes-plugin) (high, CVSS 8.8, published 21 Apr 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, down 80% on the four before (15). 1 critical against 2. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 2 | 1 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 3 | 0 | 0 | | 21 Sep 2026 | 4 | 1 | 0 | | 28 Sep 2026 | 8 | 1 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 3 | 1 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## HKUDS technologies - [HKUDS OpenHarness](https://junglewise.ai/threats/technologies/openharness): 11 vulnerabilities - [HKUDS LightRAG](https://junglewise.ai/threats/technologies/lightrag): 8 vulnerabilities - [HKUDS Nanobot](https://junglewise.ai/threats/technologies/nanobot): 8 vulnerabilities - [HKUDS Vibe-Trading](https://junglewise.ai/threats/technologies/vibe-trading): 8 vulnerabilities - [HKUDS DeepTutor](https://junglewise.ai/threats/technologies/deeptutor): 7 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "HKUDS vulnerabilities", https://junglewise.ai/threats/vendors/hkuds, 9 November 2026.