CVE-2026-108592 — mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the hos…
Published: 2026-10-10 · CVSS: 6.0 · CVSS 4.0
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7