Product
HKUDS Vibe-Trading versions 0.1.0 through 0.1.6 contain a missing authentication vulnerability allowing unauthenticated attackers to execute arbitrary shell commands, upload files, and access sensitive data.