A local API server in Vibe‑Trading trusts any request that appears to come from the loopback network. Because the server accepts connections bound to 0.0.0.0 and does not validate the Host header, an attacker can create a malicious DNS‑rebind page to issue requests that the server believes come from a trusted internal client. The attacker can then engage the API’s shell execution endpoint using a preset that enables the bash tool, executing arbitrary commands as the API process user. In addition, this authentication bypass allows the attacker to alter LLM and data‑source settings, potentially redirecting service traffic and exfiltrating credentials. This flaw is a classic implicit‑trust weakness (CWE‑346) that directly leads to remote code execution.

HKUDS Vibe‑Trading releases older than version 0.1.10 are affected. Any deployment that uses the local API server and has not applied the 0.1.10 upgrade is vulnerable.

The vulnerability has a CVSS score of 7.7, indicating a high impact. The EPSS score is not available and the issue is not listed in the CISA KEV catalog. The attack path is straightforward: a DNS‑rebind page can reach the API host, obtain authenticated access over the loopback interface, and then use the built‑in shell tools to execute arbitrary code. Because the API server binds to 0.0.0.0 by default and credentialed CORS is enabled, the potential attack vector is highly likely for exposed environments.