Skip to content

XFEDI

Conversation

ActivityPub

OffSequence@[email protected]

CVE-2026-114108: CRITICAL vuln in HKUDS Vibe-Trading ≤0.1.6 – missing auth enables root shell commands, script uploads, session leaks. Set API_AUTH_KEY & restrict API access now. Patch unconfirmed. https://radar.offseq.com/threat/cve-2026-114108-missing-authentication-for-critical-function-in-hkuds-vibe-trading-dbf2add5e4f70bbe #OffSeq #vulnerability #infosec #HKUDS

Critical threat: CVE-2026-114108: Missing Authentication for Critical Function in HKUDS Vibe-Trading

OffSeq Threat RadarCVE-2026-114108: Missing Authentication for Critical… | Threat RadarHKUDS Vibe-Trading versions from 0.1.0 up to but not including 0.1.7 have a missing authentication vulnerability. This flaw allows unauthenticated attackers to…

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 21, 2026 · 04:30 UTC

Replies

No replies here yet.