# cve.now: Hkuds

The newest entries naming Hkuds as an affected vendor (up to 200), of 48 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-114108](https://cve.now/CVE-2026-114108.md): HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE (CVSS 9.3)
- [CVE-2026-114107](https://cve.now/CVE-2026-114107.md): HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool (CVSS 8.7)
- [CVE-2026-114106](https://cve.now/CVE-2026-114106.md): HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read\_document and safe\_user\_path (CVSS 8.7)
- [CVE-2026-102874](https://cve.now/CVE-2026-102874.md): HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection (CVSS 6.9)
- [CVE-2026-86062](https://cve.now/CVE-2026-86062.md): LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content (CVSS 6.1)
- [CVE-2026-85740](https://cve.now/CVE-2026-85740.md): LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard (CVSS 7.1)
- [CVE-2026-85734](https://cve.now/CVE-2026-85734.md): LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks (CVSS 9.1)
- [CVE-2026-85725](https://cve.now/CVE-2026-85725.md): LightRAG: Plaintext Passwords Compared Without Constant-Time Function (CVSS 5.9)
- [CVE-2026-85709](https://cve.now/CVE-2026-85709.md): LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses (CVSS 5.3)
- [CVE-2026-92576](https://cve.now/CVE-2026-92576.md): HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool (CVSS 9.2)
- [CVE-2026-90809](https://cve.now/CVE-2026-90809.md): HKUDS nanobot ExecTool shell.py ExecTool.\_spawn argument injection (CVSS 6.9)
- [CVE-2026-90808](https://cve.now/CVE-2026-90808.md): HKUDS nanobot ExecTool shell.py ExecTool.\_spawn incomplete blacklist (CVSS 5.3)
- [CVE-2026-86124](https://cve.now/CVE-2026-86124.md): AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server (CVSS 9.3)
- [CVE-2026-85030](https://cve.now/CVE-2026-85030.md): HKUDS AI-Trader selfRegister API Endpoint routes\_agent.py logic error (CVSS 6.3)
- [CVE-2026-19246](https://cve.now/CVE-2026-19246.md): HKUDS nanobot Provider-returned Image URL image\_generation.py \_download\_image\_data\_url server-side request forgery (CVSS 5.3)
- [CVE-2026-19245](https://cve.now/CVE-2026-19245.md): HKUDS nanobot Login-shell Environment shell.py ExecTool.\_prepare\_command information disclosure (CVSS 4.8)
- [CVE-2026-19244](https://cve.now/CVE-2026-19244.md): HKUDS nanobot MCP enabledTools Scope mcp.py connect\_mcp\_servers access control (CVSS 5.1)
- [CVE-2026-61808](https://cve.now/CVE-2026-61808.md): LightRAG: Missing Authentication for Critical API Functions in Default Configuration (CVSS 9.8)
- [CVE-2026-19243](https://cve.now/CVE-2026-19243.md): HKUDS nanobot Shell Allowlist shell.py ExecTool.\_spawn os command injection (CVSS 5.3)
- [CVE-2026-61740](https://cve.now/CVE-2026-61740.md): LightRAG: Authentication bypass: hardcoded DEFAULT\_TOKEN\_SECRET and public /auth-status defeat LIGHTRAG\_API\_KEY protection (CVSS 9.3)
- [CVE-2026-61736](https://cve.now/CVE-2026-61736.md): LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests (CVSS 9.3)
- [CVE-2026-58173](https://cve.now/CVE-2026-58173.md): Vibe-Trading \< 0.1.10 - Path Traversal via Persistent Memory Type (CVSS 6.5)
- [CVE-2026-58171](https://cve.now/CVE-2026-58171.md): Vibe-Trading \< 0.1.10 - Path Traversal via Swarm Run Identifier (CVSS 4.2)
- [CVE-2026-58170](https://cve.now/CVE-2026-58170.md): Vibe-Trading \< 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates (CVSS 8.3)
- [CVE-2026-58169](https://cve.now/CVE-2026-58169.md): Vibe-Trading \< 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution (CVSS 7.5)
- [CVE-2026-58168](https://cve.now/CVE-2026-58168.md): DeepTutor \< 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users (CVSS 8.8)
- [CVE-2026-56696](https://cve.now/CVE-2026-56696.md): OpenHarness - Prompt Injection via /issue and /pr\_comments Slash Commands (CVSS 5.3)
- [CVE-2026-56695](https://cve.now/CVE-2026-56695.md): OpenHarness - Cross-Session Disclosure via /resume and /summary Commands (CVSS 7.1)
- [CVE-2026-48716](https://cve.now/CVE-2026-48716.md): nanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file write (CVSS 8.7)
- [CVE-2026-12203](https://cve.now/CVE-2026-12203.md): HKUDS AI-Trader Research Export agents.csv information disclosure (CVSS 6.9)
- [CVE-2026-49140](https://cve.now/CVE-2026-49140.md): Nanobot \< 0.2.1 Denial of Service via Matrix Media Download Handler (CVSS 5.3)
- [CVE-2026-49139](https://cve.now/CVE-2026-49139.md): Nanobot \< 0.2.1 SSRF via Microsoft Teams Channel serviceUrl Poisoning (CVSS 7.0)
- [CVE-2026-49138](https://cve.now/CVE-2026-49138.md): Nanobot \< 0.2.1 SSRF via web\_fetch Tool Redirect Following (CVSS 5.3)
- [CVE-2026-32847](https://cve.now/CVE-2026-32847.md): DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py (CVSS 8.7)
- [CVE-2026-7551](https://cve.now/CVE-2026-7551.md): HKUDS OpenHarness Remote Command Execution via /bridge Slash Command (CVSS 8.7)
- [CVE-2026-6823](https://cve.now/CVE-2026-6823.md): HKUDS OpenHarness Insecure Default Remote Channel Allowlist (CVSS 8.3)
- [CVE-2026-6819](https://cve.now/CVE-2026-6819.md): HKUDS OpenHarness Plugin Management Command Exposure (CVSS 8.7)
- [CVE-2026-6729](https://cve.now/CVE-2026-6729.md): HKUDS OpenHarness Session Key Collision Privilege Escalation (CVSS 5.3)
- [CVE-2026-40516](https://cve.now/CVE-2026-40516.md): OpenHarness SSRF via web\_fetch and web\_search (CVSS 7.8)
- [CVE-2026-40515](https://cve.now/CVE-2026-40515.md): OpenHarness Permission Bypass via grep and glob root argument (CVSS 8.7)
- [CVE-2026-40502](https://cve.now/CVE-2026-40502.md): OpenHarness Remote Administrative Command Injection via Gateway Handler (CVSS 8.7)
- [CVE-2026-40503](https://cve.now/CVE-2026-40503.md): OpenHarness Path Traversal Information Disclosure via /memory show (CVSS 7.1)
- [CVE-2026-35589](https://cve.now/CVE-2026-35589.md): nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update) (CVSS 8.0)
- [CVE-2026-39413](https://cve.now/CVE-2026-39413.md): LightRAG has a JWT Algorithm Confusion Vulnerability in LightRAG API (CVSS 4.2)
- [CVE-2026-22682](https://cve.now/CVE-2026-22682.md): OpenHarness Improper Access Control via File Tools (CVSS 8.4)
- [CVE-2026-33654](https://cve.now/CVE-2026-33654.md): Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling (CVSS 8.9)
- [CVE-2026-2577](https://cve.now/CVE-2026-2577.md): Nanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridge (CVSS 10.0)
- [CVE-2025-6773](https://cve.now/CVE-2025-6773.md): HKUDS LightRAG File Upload document\_routes.py upload\_to\_input\_dir path traversal (CVSS 4.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/hkuds
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.