Data Intelligence Lab@HKU Vibe-Trading path traversal vulnerability

Data Intelligence Lab@HKU Vibe-Trading versions 0.1.0 through 0.1.7 contain a path traversal vulnerability. This flaw stems from improper handling of paths in the LLM agent file reading tool; readdocument lacks proper sandbox checks, and the safeuserpath restriction can be bypassed. As a result,...