The vulnerability in HKUDS Vibe-Trading prior to version 0.1.10 involves improper origin validation and authentication bypass on the local API server. The server trusts the TCP peer address to skip the API_AUTH_KEY bearer-token check for loopback clients and does not validate the Host header. It binds to 0.0.0.0 with credentialed CORS enabled by default. An attacker can exploit this via a DNS-rebinding web page to send authenticated requests as a trusted loopback client. This enables execution of POST /swarm/runs with a preset that allows running bash commands, leading to remote code execution as the API process user. Additionally, attackers can start the live runner and overwrite LLM and data-source settings to redirect provider traffic and exfiltrate credentials.

Successful exploitation allows an attacker to bypass authentication and perform remote code execution on the API process user account. The attacker can also manipulate live runner settings to redirect traffic and exfiltrate sensitive credentials. This compromises confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the local API server to trusted hosts only and disable binding to 0.0.0.0 if possible. Avoid exposing the API server to untrusted networks and consider disabling credentialed CORS or enforcing strict Host header validation as temporary mitigations.