EUVD-2026-40354
GHSA-3j25-mjx3-pwg4
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible API requires low-privilege authentication; write-only path traversal yields high integrity impact with no confidentiality or availability effect.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying a malicious memory_type value containing path traversal sequences through the remember tool. Attackers can manipulate the memory_type parameter in the persistent memory store to cause the application to write arbitrary Markdown files to unintended locations on the filesystem.
AnalysisAI
Path traversal in Vibe-Trading before version 0.1.10 allows low-privileged authenticated network attackers to write arbitrary Markdown files outside the application's intended memory root directory. The remember tool fails to sanitize the memory_type parameter before constructing filesystem paths, enabling traversal sequences to escape the memory root and land files at attacker-controlled locations on the server. No public exploit or CISA KEV listing has been identified, but the high integrity impact and low attack complexity make patching urgent for any internet-exposed deployment.
Technical ContextAI
Vibe-Trading (CPE: cpe:2.3:a:hkuds:vibe-trading:*:*:*:*:*:*:*:*) is an AI-assisted trading application by HKUDS that implements a persistent memory subsystem accessible via a tool named remember. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory - Path Traversal): the application accepts a user-supplied memory_type string and incorporates it directly into a filesystem path when writing Markdown memory files, without stripping or validating traversal sequences such as ../. An attacker who controls memory_type can therefore construct a path like ../../var/www/html/backdoor that resolves outside the memory root. The impact is constrained to Markdown file writes, but the write target is arbitrary within the application process's filesystem permissions.
RemediationAI
Upgrade Vibe-Trading to version 0.1.10 or later, which resolves this vulnerability per the vendor release at https://github.com/HKUDS/Vibe-Trading/releases/tag/v0.1.10 and the corresponding fix in PR #257 (https://github.com/HKUDS/Vibe-Trading/pull/257). If immediate upgrade is not feasible, restrict access to the remember tool and the persistent memory API endpoint to only fully trusted, internal users - removing low-privilege external access eliminates the primary attack path. Additionally, run the Vibe-Trading process under a dedicated service account with write permissions scoped exclusively to the intended memory root directory using filesystem-level controls (e.g., chroot, AppArmor, or SELinux policy), which contains the blast radius to the memory directory even if the traversal succeeds. Note that path restriction at the OS level does not fix the underlying vulnerability and should be treated as a temporary compensating control only.
More in Vibe Trading
View allRemote code execution in HKUDS Vibe-Trading before 0.1.10 is reachable via a DNS-rebinding attack against its local API
Trading mandate forgery in HKUDS Vibe-Trading before 0.1.10 lets an admitted (low-privileged) caller supply a proposal i
Path traversal in Vibe-Trading's swarm run directory handler allows low-privileged network attackers to read and overwri
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today