CVE-2026-58170 - Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates
CVE ID :CVE-2026-58170 Published : June 30, 2026, 3:53 p.m. | 1 hour, 19 minutes ago Description :Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization...