HKUDS vulnerabilities

Products

• LightRAG 10
• OpenHarness 9
• nanobot 6
• hkuds/vibe-trading 4
• ai-trader 2
• anytool 1
• hkuds/autoagent 1
• hkuds/deepcode 1
• hkuds/deeptutor 1

Latest HKUDS CVEs

Newest publication first · page 1 of 2

1. CVE-2026-102874 HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection

   Published 2026-09-30

   Medium·CVSS 6.9 EPSS 1.3%

   A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local_server/main.py of the component Execute Endpoint. The manipulation of the argument command/shell leads to os command injection. It is possible to initiate the...

2. CVE-2026-86062 LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

   Published 2026-09-22

   Medium·CVSS 6.1 EPSS 0.34%

   LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An attacker who can add a do...

3. CVE-2026-85740 LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

   Published 2026-09-22

   High·CVSS 7.1 EPSS 0.26%

   LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, _validated_addresses in lightrag/parser/markdown/parser.py evaluates the literal resolved address with ipaddress.is_global without consistently classifying an IPv4 address embedded in an IPv6 transi...

4. CVE-2026-85734 LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

   Published 2026-09-22

   Critical·CVSS 9.1 EPSS 0.61%

   LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightrag_server.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attacker can submit passwor...

5. CVE-2026-85725 LightRAG: Plaintext Passwords Compared Without Constant-Time Function

   Published 2026-09-22

   Medium·CVSS 5.9 EPSS 0.45%

   LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verify_password in lightrag/api/passwords.py compares plaintext AUTH_ACCOUNTS password values with Python's == operator. The comparison can return after the first mismatching byte, creating response...

6. CVE-2026-85709 LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

   Published 2026-09-22

   Medium·CVSS 5.3 EPSS 0.42%

   LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in document_routes.py, graph_routes.py, query_routes.py, ollama_api.py, and lightrag_server.py. The detail=str(e), detai...

7. CVE-2026-86124 AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server

   Published 2026-09-05

   Critical·CVSS 9.3 EPSS 0.98%

   AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the contain...

8. CVE-2026-85030 HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error

   Published 2026-09-03

   Medium·CVSS 6.3 EPSS 0.46%

   A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routes_agent.py of the component selfRegister API Endpoint. Such manipulation of the argument initial_balance l...

9. CVE-2026-61808 LightRAG: Missing Authentication for Critical API Functions in Default Configuration

   Published 2026-08-07

   Critical·CVSS 9.8 EPSS 2.5%

   LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delet...

10. CVE-2026-61740 LightRAG: Authentication bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

    Published 2026-07-15

    Critical·CVSS 9.3 EPSS 0.51%

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAG_API_KEY set but AUTH_ACCOUNTS unset, X-API-Key protection can be bypassed because lightrag/api/auth.py falls back to a hardcoded DEFAULT_TOKEN_SECRET, /auth-s...

11. CVE-2026-61736 LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

    Published 2026-07-15

    Critical·CVSS 9.3 EPSS 1.4%

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defaults to CORS_ORIGINS=* combined with allow_credentials=True in lightrag/api/lightrag_server.py, causing Starlette CORSMiddleware to effectively whitelist every origin for credentialed...

12. CVE-2026-58173 Vibe-Trading < 0.1.10 - Path Traversal via Persistent Memory Type

    Published 2026-06-30

    Medium·CVSS 6.0 EPSS 0.45%

    Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying a malicious memory_type value containing path traversal sequences through the remember tool. Attackers can manipulate th...

13. CVE-2026-58171 Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier

    Published 2026-06-30

    Low·CVSS 2.3 EPSS 0.34%

    Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in run_dir (agent/src/swarm/store.py). A crafted run identifier supplied through the MCP swarm tools causes the application to...

14. CVE-2026-58170 Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates

    Published 2026-06-30

    High·CVSS 7.2 EPSS 0.55%

    Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization (agent/src/live/mandate/commit.py). A proposal identifier containing path traversal sequences causes the application...

15. CVE-2026-58169 Vibe-Trading < 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution

    Published 2026-06-30

    High·CVSS 7.7 EPSS 0.42%

    Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypass bearer-token authentication by exploiting the server's trust of TCP peer addresses for loopback clients combined with missing Host header validation whil...

16. CVE-2026-58168 DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users

    Published 2026-06-30

    High·CVSS 7.7 EPSS 0.41%

    DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools is omitted from a user's grant in deeptut...

17. CVE-2026-48716 nanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file write

    Published 2026-06-18

    High·CVSS 8.7 EPSS 0.33%

    nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a filesystem path using the fileName field from an incoming WhatsApp document message without sanitization. The WhatsApp bridge downloads media attachme...

18. CVE-2026-12203 HKUDS AI-Trader Research Export agents.csv information disclosure

    Published 2026-06-15

    Medium·CVSS 6.9 EPSS 0.40%

    A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215. This affects an unknown part of the file /api/research/agents.csv of the component Research Export. Performing a manipulation results in information disclosure. Remote exploitation of the...

19. CVE-2026-49140 Nanobot < 0.2.1 Denial of Service via Matrix Media Download Handler

    Published 2026-06-01

    Medium·CVSS 5.3 EPSS 0.27%

    Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaust process memory and bandwidth by sending media events with missing or invalid size metadata. Attackers can send...

20. CVE-2026-49139 Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl Poisoning

    Published 2026-06-01

    High·CVSS 7.0 EPSS 0.38%

    Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate Bot Framework bearer tokens by supplying a forged activity with an attacker-controlled serviceUrl value. Attackers...

21. CVE-2026-32847 DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py

    Published 2026-05-28

    High·CVSS 8.7 EPSS 0.38%

    DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to read arbitrary files by supplying percent-encoded path segments to the GET /{full_path:path} endpoint. Attackers c...

22. CVE-2026-7551 HKUDS OpenHarness Remote Command Execution via /bridge Slash Command

    Published 2026-04-30

    High·CVSS 8.7 EPSS 0.65%

    HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text...

23. CVE-2026-6823 HKUDS OpenHarness Insecure Default Remote Channel Allowlist

    Published 2026-04-21

    High·CVSS 8.3 EPSS 0.34%

    HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permitting arbitrary remote senders to pass admission checks. Attackers who can reach the configured channel can bypass access...

24. CVE-2026-6819 HKUDS OpenHarness Plugin Management Command Exposure

    Published 2026-04-21

    High·CVSS 8.7 EPSS 0.29%

    HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin enable, /plugin disable, and /reload-plugins to remote senders by default. Attackers who gain access through the channel layer can remotely manage plugin trust and...

25. CVE-2026-6729 HKUDS OpenHarness Session Key Collision Privilege Escalation

    Published 2026-04-20

    Medium·CVSS 5.3 EPSS 0.20%

    HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or threads to hijack other users' sessions by exploiting a shared ohmo session key that lacks sender identity verification. Attack...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.