CVE-2026-12203: HKUDS AI-Trader Research Export agents.csv information disclosure
HKUDS · AI-Trader
Vendor fix available · Affected: HKUDS AI-Trader · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 35% of scored CVEs
DescriptionCVE.org
A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215. This affects an unknown part of the file /api/research/agents.csv of the component Research Export. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named 91a31aac1b0f4dbc6b8bef9f6eff0b7912e0bc65. Applying a patch is the recommended action to fix this issue. The vendor confirms: "Research export endpoints now require an authenticated agent with the research_exports capability".
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- HKUDS · AI-Trader74caf996f78dcc0c657df8365c8544678a16e215
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2026-12203 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.
References
- NVD entrynvd.nist.gov
- CVE recordcve.org
- Weakness CWE-200cwe.mitre.org
- Issue trackergithub.com
- Patchgithub.com
- vuldb.com/vuln/370846vuldb.com
- vuldb.com/vuln/370846/ctivuldb.com
- Third-party advisoryvuldb.com
- Third-party advisoryvuldb.com
- Issue trackergithub.com
- Exploitgithub.com
- github.com/HKUDS/AI-Tradergithub.com