HighVulnerabilityLLM-specific
CVE-2026-114107: HKUDS Vibe-Trading indirect prompt injection enabling shell command execution
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-114107
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
HKUDS Vibe-Trading versions from 0.1.0 before 0.1.7 are affected by an indirect prompt injection flaw tracked as CVE-2026-114107. Remote attackers can plant instructions in documents or web pages the agent processes, causing shell commands to run as root. BashTool and BackgroundRunTool pass model-emitted commands to subprocess.run with shell=True and no allow-list or approval step, and read_url fetches arbitrary URLs, which also enables server-side request forgery.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- InfoBuilding Trust into Enterprise AI Agents: Cisco AI Defense and Workday Agent PassportSimilar attack · Cisco AI Blog
- InfoAfter the Attacker Leaves: Benchmarking Carryover Attacks on LLM AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoMAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM SystemsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoContext-Aware Prompt Injection Detection via Small Language Models in RAG Pipelines: nokast-secureRAGSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoClawMMU: Protection-Coherent Virtual Memory for Stateful LLM AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)