What is CVE-2026-85030?

CVE-2026-85030 is a low-severity vulnerability in Hkuds Ai-Trader, classified under CWE-840. CVSS score: 3.7/10. Published 2026-09-03.

How severe is CVE-2026-85030?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Hkuds Ai-Trader

CVE-2026-85030

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routes_agent.py of the component selfRegister API Endpoint. Such manipulation of the argument initial_balance leads to business logic errors. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is described as difficult. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. profit_percent_for_display() divides by INITIAL_CAPITAL + deposited, and challenge scoring's return_pct also normalises against the attacker-inflated starting_cash. So an inflated initial_balance does not yield artificial percent returns - it inflates the absolute cash/equity column only, which is a cosmetic/leaderboard-gaming concern in a simulated game.

Published 2026-09-03 · last modified 2026-09-05.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N.

EPSS exploit prediction

EPSS: 0.005 (38.7th percentile), scored 2026-10-19.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 39th percentile — 38.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.005 · change: +0.001

Affected products

Hkuds Ai-Trader — versions d03ff6c056b32ced735adf7c19ed8175adb1c8df

Weakness classification (CWE)

CWE-840

References

github.com/Dave-gilmore-aus/security-advisories/blob/main/AI-Trader-Unrestricte… (exploit)
github.com/HKUDS/AI-Trader/ (product)
github.com/HKUDS/AI-Trader/issues/241 (issue-tracking)
vuldb.com/cve/CVE-2026-85030 (third-party-advisory)
vuldb.com/submit/830272 (third-party-advisory)
vuldb.com/vuln/398295 (technical-description, vdb-entry)
vuldb.com/vuln/398295/cti (signature, permissions-required)

Frequently asked questions

What is CVE-2026-85030?: CVE-2026-85030 is a low-severity vulnerability in Hkuds Ai-Trader, classified under CWE-840. CVSS score: 3.7/10. Published 2026-09-03.
How severe is CVE-2026-85030?: Low severity. CVSS v3 base score is 3.7 out of 10.