HKUDS vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-114108 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface bCritical 9.3 · Oct 20, 2026
• CVE-2026-114107 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root byHigh 8.7 · Oct 20, 2026
• CVE-2026-114106 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agentHigh 8.7 · Oct 20, 2026
• CVE-2026-85740 LightRAG provides simple and fast retrieval-augmented generation.High 7.1 · Sep 22, 2026
• CVE-2026-85734 LightRAG provides simple and fast retrieval-augmented generation.Critical 9.1 · Sep 22, 2026
• CVE-2026-92576 HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block Critical 9.2 · Sep 16, 2026
• CVE-2026-86124 AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commandsCritical 9.3 · Sep 5, 2026
• CVE-2026-61808 LightRAG provides simple and fast retrieval-augmented generation.Critical 9.8 · Aug 7, 2026
• CVE-2026-61740 LightRAG provides simple and fast retrieval-augmented generation.Critical 9.3 · Jul 15, 2026
• CVE-2026-61736 LightRAG provides simple and fast retrieval-augmented generation.Critical 9.3 · Jul 15, 2026
• CVE-2026-58170 Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitizatiHigh 7.2 · Jun 30, 2026
• CVE-2026-58169 Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypass bearer-token authentication by exHigh 7.7 · Jun 30, 2026
• CVE-2026-58168 DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowHigh 7.7 · Jun 30, 2026
• CVE-2026-56695 OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to enumerate and load arbitrary High 7.1 · Jun 23, 2026
• CVE-2026-48716 nanobot is a personal AI assistant.High 8.7 · Jun 18, 2026
• CVE-2026-49139 Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfilHigh 7 · Jun 1, 2026
• CVE-2026-32847 DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackeHigh 8.7 · May 28, 2026
• CVE-2026-7551 HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arHigh 8.7 · Apr 30, 2026
• CVE-2026-6823 HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permittHigh 8.3 · Apr 21, 2026
• CVE-2026-6819 HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin enable, /plugin disable, and /reload-pluginsHigh 8.7 · Apr 21, 2026
• CVE-2026-40516 OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_fetch and web_search tools that allows attackers to access priHigh 7.8 · Apr 17, 2026
• CVE-2026-40515 OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normaliHigh 8.7 · Apr 17, 2026
• CVE-2026-40503 OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplyiHigh 7.1 · Apr 15, 2026
• CVE-2026-40502 OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administratHigh 8.7 · Apr 15, 2026
• CVE-2026-35589 nanobot is a personal AI assistant.High 8 · Apr 14, 2026