{"data":{"id":"5ff3f369-5a75-439b-a788-1a9333c19216","title":"CVE-2026-12203: A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215. This affects an unknown…","summary":"A vulnerability in HKUDS AI-Trader, up to commit 74caf996f78dcc0c657df8365c8544678a16e215, affects an unknown part of the file /api/research/agents.csv in the Research Export component. Manipulating it leads to information disclosure, and remote exploitation is possible. The exploit has been made public. The project uses a rolling release, so no affected version details are given.","solution":"The patch is named 91a31aac1b0f4dbc6b8bef9f6eff0b7912e0bc65, and applying it is the recommended action. The vendor confirms: \"Research export endpoints now require an authenticated agent with the research_exports capability\".","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12203","publishedAt":"2026-06-15T02:16:12.100Z","cveId":"CVE-2026-12203","cweIds":["CWE-200","CWE-284"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["HKUDS AI-Trader"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"HKUDS AI-Trader information disclosure through research agents export endpoint","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00402,"epssCheckedAt":"2026-11-04T06:10:15.237Z","kevDateAdded":null,"advisoryAliases":["GHSA-8v2r-35gr-p77q"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T00:09:39.645Z","patchAvailable":null,"disclosureDate":"2026-06-15T02:16:12.100Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}