PT-2026-53924 · Hkuds · Vibe-Trading

Publicado 2026-06-30 · Atualizado 2026-06-30 · CVE-2026-58173

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying a malicious memory type value containing path traversal sequences through the remember tool. Attackers can manipulate the memory type parameter in the persistent memory store to cause the application to write arbitrary Markdown files to unintended locations on the filesystem.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-58173

Produtos afetados

Vibe-Trading

Referências · 4

• 🔥 https://github.com/HKUDS/Vibe-Trading/pull/257 · Exploit
• https://github.com/HKUDS/Vibe-Trading/releases/tag/v0.1.10 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-58173 · Nota de Segurança
• https://vulncheck.com/advisories/vibe-trading-path-traversal-via-persistent-memory-type · Nota