Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.0	EPSS 0.3%	CVE-2026-108592mini-swe-agent · Cleartext Storage of Sensitive Information in an Environment Variable Medium6.0EPSS 0.3%2026-10-10CVE Database V5CVE-2026-108592 mini-swe-agent versions 1.10.0 through 2.4.6 have an information exposure vulnerability due to sandboxed commands inheriting the host environment. This occurs because the BubblewrapEnvironment component uses bwrap without the --clearenv option, allowing environment variables such as API keys to be exposed. Attackers can exploit this via prompt injection in processed task content to read and exfiltrate sensitive environment variables over the network. EPSS 0.3%Vulnerability SWE-agent	CVE Database V5	2026-10-10

Showing 1–1 of 1 result