Permissive Cross-domain Policy with Untrusted Domains Affecting vibe-trading-ai package, versions [0.1.0,0.1.7)
Threat Intelligence
Snyk has a proof-of-concept or detailed explanation of how to exploit this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Permissive Cross-domain Policy with Untrusted Domains vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-PYTHON-VIBETRADINGAI-21693771
- published24 Oct 2026
- disclosed2 Oct 2026
- creditUnknown
Introduced: 2 Oct 2026
New CVE NOT AVAILABLE CWE-306 (opens in a new tab)How to fix?
Upgrade vibe-trading-ai to version 0.1.7 or higher.
Overview
vibe-trading-ai is a Natural-language finance research AI agent with backtesting
Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains via the API server in agent/api_server.py, which skips authentication entirely when the API_AUTH_KEY environment variable is not set, allowing any remote attacker to reach all API endpoints without credentials. An unauthenticated remote attacker can invoke sensitive endpoints - including shell tool execution and session management - over the network, leading to full confidentiality, integrity, and availability compromise of the host. The fix enforces that unauthenticated (dev-mode) access is restricted to loopback clients only, and raises HTTP 403 for any non-local request when no key is configured.
Note: This is only exploitable when a real LLM API key is configured and the service is reachable from non-loopback network interfaces.