EUVD-2026-36678
GHSA-8v2r-35gr-p77q
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible endpoint requires no privileges or user interaction; impact is limited to partial confidentiality of research export data with no integrity or availability effect.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215. This affects an unknown part of the file /api/research/agents.csv of the component Research Export. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named 91a31aac1b0f4dbc6b8bef9f6eff0b7912e0bc65. Applying a patch is the recommended action to fix this issue. The vendor confirms: "Research export endpoints now require an authenticated agent with the research_exports capability".
AnalysisAI
Unauthenticated information disclosure in HKUDS AI-Trader exposes the Research Export endpoint (/api/research/agents.csv) to any remote attacker without credentials, leaking proprietary research output in CSV format. The vendor explicitly confirmed the pre-patch state lacked access control: 'Research export endpoints now require an authenticated agent with the research_exports capability.' A public proof-of-concept exploit exists (CVSS 4.0: 6.9, E:P), and the upstream fix is available via commit 91a31aac1b0f4dbc6b8bef9f6eff0b7912e0bc65; no active exploitation is confirmed in CISA KEV at this time.
Technical ContextAI
HKUDS AI-Trader is an open-source AI-driven financial trading platform. The affected component is the Research Export feature, which serves agent research data via the /api/research/agents.csv HTTP endpoint. The root cause is CWE-200 (Exposure of Sensitive Information to Unauthorized Actor): the endpoint returned structured research data without any identity or capability verification. The PR #227 diff confirms the pre-patch frontend route rendered <ResearchExportsPage /> with zero authentication gate; after the fix, the route enforces canUseResearchExports && token using a hasPermission(agentInfo, 'research_exports') check derived from the authenticated agent's capability set. The backend fix (per vendor statement) mirrors this at the API layer. All releases through commit 74caf996f78dcc0c657df8365c8544678a16e215 are affected per CPE cpe:2.3:a:hkuds:ai-trader:*:*:*:*:*:*:*:*.
RemediationAI
Apply patch commit 91a31aac1b0f4dbc6b8bef9f6eff0b7912e0bc65, available at https://github.com/HKUDS/AI-Trader/commit/91a31aac1b0f4dbc6b8bef9f6eff0b7912e0bc65 and tracked in PR #227 at https://github.com/HKUDS/AI-Trader/pull/227. Because AI-Trader uses rolling releases, operators should update their deployment to any commit at or after 91a31aac. As a compensating control prior to patching, restrict network-level access to the /api/research/agents.csv path at the reverse proxy or firewall - for example, configure nginx to require a valid session cookie or return 403 for unauthenticated requests to that path. The trade-off is that this will also block legitimate authenticated users from using research exports until the proxy rule is refined or the patch is applied. No standalone vendor security advisory URL beyond the GitHub commit and VulDB entry is available.
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today