vibe-trading-ai vulnerabilities (PyPI)

3 vulnerabilities.

• vibe-trading-ai PyPI HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE CVE-2026-114108 Fix available 9.3 CriticalOctober 2, 2026
• vibe-trading-ai PyPI HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path CVE-2026-114106 Fix available 8.7 HighOctober 2, 2026
• vibe-trading-ai PyPI HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool CVE-2026-114107 Fix available 8.7 HighOctober 2, 2026