CVE-2026-58173
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Jun 30, 2026
Vendor
unknown
Description
Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying a malicious memory_type value containing path traversal sequences through the remember tool. Attackers can manipulate the memory_type parameter in the persistent memory store to cause the application to write arbitrary Markdown files to unintended locations on the filesystem.