Security1 hOctober 21, 2026, 18:10

Vibe-Trading flaw lets prompt injection run root shell commands

HKUDS Vibe-Trading 0.1.0–0.1.6 contains CVE-2026-114107 (CVSS 8.7): instructions planted in documents or web pages make the AI agent run shell commands as root with no approval step. The flaw is fixed in version 0.1.7.

DEV Community

Open source

Vibe-Trading flaw lets prompt injection run root shell commands

BashTool and BackgroundRunTool pass model-emitted commands to subprocess.run with shell=True and no allow-list
The container has no USER directive, so executed commands run as uid=0 (root)
read_url fetches arbitrary URLs, enabling SSRF; related CVE-2026-114106 allows reading /etc/shadow
Fixed in Vibe-Trading 0.1.7; VulnCheck rates it High, CVSS 8.7

#Vibe-Trading#HKUDS

A Prompt Injection Turned Into a Shell: Inside Semantic Kernel's Two RCE CVEs

Security

SonicWall SMA1000 Command Injection CVE-2026-83549 Chained to Root

Security

OpenSRE flaw lets headless agents run shell commands without approval

Security

Vibe-Trading flaw lets prompt injection run root shell commands

A Prompt Injection Turned Into a Shell: Inside Semantic Kernel's Two RCE CVEs

SonicWall SMA1000 Command Injection CVE-2026-83549 Chained to Root

OpenSRE flaw lets headless agents run shell commands without approval

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root