Is there a patch available for CVE-2026-58171?

Yes, a patch is available for CVE-2026-58171. Update the affected software to the latest version immediately.

Vibe-Trading CVE-2026-58171

Q: What is the CVSS score of CVE-2026-58171?

CVE-2026-58171 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-40352 LOW

Path Traversal (CWE-22)

2026-06-30 VulnCheck

GHSA-mjrq-xg2m-qg94

Path Traversal Vibe Trading Hkuds

2.3

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

2.3 MEDIUM

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.0 MEDIUM

C:L assigned over vendor's C:N because description explicitly confirms arbitrary run.json reads; all other metrics align with the provided vector.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Jun 30, 2026 - 17:22 NVD

MEDIUM LOW

CVSS changed

Jun 30, 2026 - 17:22 NVD

4.2 (MEDIUM) 2.3 (LOW)

Analysis Generated

Jun 30, 2026 - 17:22 vuln.today

DescriptionCVE.org

Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in run_dir (agent/src/swarm/store.py). A crafted run identifier supplied through the MCP swarm tools causes the application to read arbitrary run.json files outside the runs directory and to overwrite existing run.json files at traversed locations.

AnalysisAI

Path traversal in Vibe-Trading's swarm run directory handler allows low-privileged network attackers to read and overwrite arbitrary run.json files on the host filesystem. All releases before 0.1.10 are affected via the MCP swarm tools interface, where a crafted run identifier is passed to the run_dir function in agent/src/swarm/store.py without sanitization, enabling directory escape. No public exploit is identified at time of analysis and the vulnerability is not in the CISA KEV catalog; a vendor-released patch is available as v0.1.10.

Technical ContextAI

Vibe-Trading (CPE: cpe:2.3:a:hkuds:vibe-trading) is an AI-powered trading swarm orchestration application developed by HKUDS. The vulnerability resides in agent/src/swarm/store.py in the run_dir function, which constructs filesystem paths by joining a caller-supplied run identifier string directly onto a base runs directory using Python path operations without neutralizing traversal sequences such as '../'. This is a textbook CWE-22 (Path Traversal) root cause: user-controlled input is consumed in a filesystem operation before being validated or canonicalized. The attack surface is the MCP (Model Context Protocol) swarm tools interface, which is network-accessible and allows authenticated users to submit run identifiers programmatically, making the traversal remotely triggerable.

RemediationAI

Upgrade to Vibe-Trading v0.1.10 or later, which resolves the path traversal via the patch committed at https://github.com/HKUDS/Vibe-Trading/commit/f45fd85392f07b5e404e41d4fcb0ef0d6c2f87ab (merged via PR #258, https://github.com/HKUDS/Vibe-Trading/pull/258). The vendor release is documented at https://github.com/HKUDS/Vibe-Trading/releases/tag/v0.1.10. If an immediate upgrade is not possible, restrict access to the MCP swarm tools interface exclusively to fully trusted users, since exploitation requires authenticated low-privilege access (PR:L) - limiting the user pool directly reduces attack surface. Additionally, apply filesystem-level access controls (OS permissions or chroot/container isolation) to prevent the application process from resolving paths outside the intended runs directory. Note that restricting MCP tool access may degrade collaborative swarm functionality.