GHSA-jqmf-mx4f-hfr6
Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF
5 findings — BashTool shell-injection sink (F6, the canonical RCE primitive), BackgroundRunTool async shell-injection sink (F7), backtest exec_module() runs top-level statements before the SignalEngine class check (F8 — independent RCE path that does not match BashTool signatures), read_url outbound HTTP forwarding without schema/host validation (F-B4 SSRF), and Jinja2 codegen with autoescape…
- No known exploitation
- Severity
- Critical, CVSS 10.0 (v3.1)
- Affected packages
- vibe-trading-ai (pip) >= 0.1.0, < 0.1.7, fixed in 0.1.7 · GHSA-jqmf-mx4f-hfr6