{"id":"CVE-2026-114108","published":"2026-10-21T01:17:36.820","lastModified":"2026-10-22T17:40:46.877","description":"HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because require_auth() returns early when API_AUTH_KEY is unset. Attackers can post messages to /sessions/{id}/messages to trigger root shell commands via BashTool, upload .py or .sh files via /upload, read session histories, and obtain partial API keys.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj","tags":[]},{"url":"https://www.vulncheck.com/advisories/hkuds-vibe-trading-before-0.1.7-missing-authentication-in-fastapi-server-enabling-rce","tags":[]}],"exploitRefs":[{"url":"https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj","tags":[]}],"hasPoc":true,"ai":{"summary":"The FastAPI surface of HKUDS Vibe-Trading (0.1.0–0.1.6) lacks authentication enforcement when API_AUTH_KEY is unset, allowing unauthenticated remote attackers to interact with the API and trigger arbitrary command execution via BashTool, upload malicious files, read session histories, and obtain partial API keys.","exploitability":"Exploitation is trivial for any remote attacker since no authentication is required and the vulnerable endpoint is publicly accessible over HTTP.","blast_radius":"Successful exploitation grants attackers full remote code execution as root, access to sensitive session data, and potential leakage of partial API credentials, enabling full system compromise and lateral movement.","remediation":"Upgrade to Vibe-Trading version 0.1.7 or later, which fixes the early-return behavior in require_auth() when API_AUTH_KEY is unset.","detection":"Look for unauthenticated POST requests to /sessions/{id}/messages or /upload endpoints from external IPs, especially with payloads containing shell metacharacters or file extensions like .sh/.py; also monitor for unexpected process spawns of bash or python interpreters from the FastAPI service context.","tags":["rce","auth-bypass","fastapi","unauthenticated-access","command-injection"],"model":"garnet-coder","analyzedAt":"2026-10-24T08:54:44.630Z"}}