HKUDS Vibe-Trading versions 0.1.0 before 0.1.7 contain an indirect prompt injection vulnerability allowing remote attackers to execute shell commands as root through malicious instructions in documents or web pages processed by the agent.
Disclosed 21 October 2026 · Record updated 21 October 2026
Remote code execution as root via indirect prompt injection through BashTool and BackgroundRunTool, with ability to execute arbitrary shell commands and perform server-side request forgery.
VulnerabilitiesA vulnerability disclosed on 21 October 2026 affects HKUDS Vibe-Trading from version 0.1.0 before 0.1.7, with shell commands passed straight to the operating system.
21 Oct 2026
