Vibe-Trading before version 0.1.10 improperly limits pathname construction in the run_dir function (agent/src/swarm/store.py) by joining a caller-supplied run identifier onto the base runs directory without validation. This allows an attacker supplying a crafted run identifier via MCP swarm tools to perform path traversal, enabling reading arbitrary run.json files outside the runs directory and overwriting existing run.json files at traversed locations.

The vulnerability allows an attacker with low privileges and no user interaction to read and overwrite arbitrary run.json files outside the intended runs directory. This can impact the integrity and availability of data managed by the application. Confidentiality is not affected according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using vulnerable versions prior to 0.1.10 or restrict access to the MCP swarm tools to trusted users to mitigate exploitation risk.