Threats Tagged 'ghsa-jqmf-mx4f-hfr6'

Vibe trading AI contains multiple critical vulnerabilities that allow unauthenticated remote attackers to execute arbitrary shell commands as root via LLM-callable tools. The BashTool, BackgroundRunTool, and other components execute commands without filtering or validation, enabling command injection, code injection, and SSRF. These vulnerabilities are reachable from any anonymous TCP client due to an unauthenticated API endpoint and lack of operator opt-in gating. Prompt injection attacks can also trigger arbitrary command execution by embedding malicious instructions in documents processed by the LLM agent. The vulnerabilities affect versions from 0.1.0 up to but not including 0.1.7. A patch is available to remediate these issues.