Arbitrary File Read Vulnerability in Vibe-Trading AI Package
Summary
GHSA-5rmq-chc7-m22f: Vibe-Trading file-read tools expose arbitrary server-readable files. Affects vibe-trading-ai versions >= 0.1.0, < 0.1.7. Fixed in 0.1.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Vibe-Trading AI is an open-source package designed for trading and financial analysis, utilizing FastAPI for its backend services. It provides tools for processing trade journals and managing trading strategies. However, due to improper file access controls, it exposes sensitive server-readable files, making it vulnerable to unauthorized access.
Vulnerability Detail
The vulnerability arises from two main findings: the 'safe_user_path()' function allows access to any path under the user's home directory and current working directory, including sensitive files like SSH keys and AWS credentials. Additionally, the 'read_document()' function lacks any sandboxing, permitting access to any readable file on the server, including critical system files like '/etc/shadow' and '/proc/self/environ'. This can lead to significant information exposure, allowing attackers to retrieve sensitive data without authentication.
How To Fix
Latest published version: 0.1.18 as of 22 Oct 2026
pip install --upgrade "vibe-trading-ai==0.1.18"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.1.7
This is the first release that contains the fix.
pip install --upgrade "vibe-trading-ai==0.1.7"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can run the FastAPI process as a non-root user to limit the potential damage from unauthorized file access. This can be done by adding the following lines to your Dockerfile: 'RUN useradd -m vibe && chown -R vibe /app' and 'USER vibe' before the CMD instruction.
Conclusion
The Vibe-Trading AI package has a critical vulnerability that allows unauthorized access to sensitive files due to improper file access controls. It is essential to update the package to the latest version and implement recommended security practices to protect sensitive data.
See every vulnerability recorded for vibe-trading-ai →
FAQ
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Due to this vulnerability, sensitive files such as SSH keys, AWS credentials, and system files like '/etc/shadow' can be accessed.
Yes, a patch is available in version 0.1.7 of the Vibe-Trading AI package. It is recommended to update to this version.
If you cannot update the package immediately, consider running the FastAPI process as a non-root user to mitigate the risk of unauthorized file access.
References
Related vulnerabilities
Recent vulnerabilities recorded for vibe-trading-ai.
