CVE-2026-58173

Name of the Vulnerable Software and Affected Versions Vibe-Trading versions prior to 0.1.10

Description A path traversal issue exists in the remember tool, allowing attackers to write arbitrary Markdown files to unintended locations on the filesystem. This is achieved by supplying a malicious memory type value containing path traversal sequences within the persistent memory store, which enables writing files outside the intended memory root directory.

Recommendations Update Vibe-Trading to version 0.1.10 or later. Restrict the use of the memory type parameter in the persistent memory store to prevent unauthorized file writes.