Vibe-Trading 工具链曝命令注入与 SSRF 漏洞
Start here
2026年10月3日，GitHub 安全公告披露 Vibe-Trading 的五个 LLM 可调用工具存在命令执行、代码注入与 SSRF 漏洞。其中 BashTool 与 BackgroundRunTool 的 CVSS v3.1 评分均为 9.0。这些工具在默认配置下无条件注册进自动发现的工具注册表，LLM 可自由调用；容器未设置 USER 指令，成功执行后以 uid=0(root) 运行。BashTool 将 LLM 生成的命令原样传给子进程执行。
Generated by AI from reports · Updated 11 days ago
Progress timeline
- GitHub 安全公告SelectedFive LLM-callable tools in Vibe-Trading disclosed with command execution, code injection, and SSRF vulnerabilities
A GitHub security advisory discloses that five LLM-callable tools in Vibe-Trading have command execution, code injection, and SSRF vulnerabilities, with BashTool and BackgroundRunTool both scoring 9.0 on CVSS v3.1. These tools are unconditionally registered into the auto-discovered tool registry under default configuration, the LLM can call them freely, and the container does not set a USER directive, so successful execution runs as uid=0 (root). BashTool passes LLM-generated commands verbatim to subprocess.run(shell=True) with no allowlist, escaping, or length limits; BackgroundRunTool executes the same kind of commands asynchronously, making execution harder to discover in access logs. The advisory also notes that even if the unauthenticated interface is fixed, attackers can still perform prompt injection on the Agent through malicious documents, turning legitimate callers into RCE channels.
Related discussion
Attention trend
New sources per day
- Oct 3: 1 new sources (1 outlets, 0 accounts)
- Oct 4: 0 new sources (0 outlets, 0 accounts)
- Oct 5: 0 new sources (0 outlets, 0 accounts)
- Oct 6: 0 new sources (0 outlets, 0 accounts)
- Oct 7: 0 new sources (0 outlets, 0 accounts)
- Oct 8: 0 new sources (0 outlets, 0 accounts)
- Oct 9: 0 new sources (0 outlets, 0 accounts)
- Oct 10: 0 new sources (0 outlets, 0 accounts)
- Oct 11: 0 new sources (0 outlets, 0 accounts)
- Oct 12: 0 new sources (0 outlets, 0 accounts)
- Oct 13: 0 new sources (0 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)