This vulnerability resides in the read_document and safe_user_path functions of HKUDS Vibe-Trading. The functions lack proper sandbox checks, allowing a remote user to craft requests that cause the application to read arbitrary files on the host. Files such as /etc/shadow, /proc/self/environ, and /root credentials can be exposed, compromising confidentiality and potentially permitting privileged access if credentials are retrieved.

Products from the vendor HKUDS named Vibe-Trading, versions 0.1.0 through 0.1.6, are affected. Any deployment of these versions on a server exposes the application to remote file-read attacks.

The CVSS score of 8.7 classifies this as a high severity vulnerability. The EPSS score of less than 1% indicates that, while the vulnerability exists, the current exploit probability is low. It is not listed in the CISA KEV catalog. Remote attackers can exploit the flaw by invoking the vulnerable LLM agent file‑read tools through the read_document endpoint, bypassing sandbox checks. Successful exploitation would result in the disclosure of confidential data on the affected host.