Vulnerability · Published Oct 21, 2026 · Assigned by VulnCheck

CVE-2026-114107HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool

High 8.8

In plain English

A high-severity security flaw in Vibe-Trading from HKUDS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.6%top 52.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to subprocess.run with shell=True and no allow-list or approval step, and read_url fetches arbitrary URLs, enabling command execution and server-side request forgery.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	vibe-trading-ai	0.1.7	GHSA-jqmf-mx4f-hfr6

Affected products (as reported)

Vendor	Product	Versions
HKUDS	Vibe-Trading	0.1.0 – before 0.1.7

Weakness: CWE-1427 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

GitHub Security Advisory (GHSA-jqmf-mx4f-hfr6) vendor-advisory
VulnCheck Advisory: HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool third-party-advisory