CVE-2026-108592CWE-526

CVE-2026-108592

Medium · published October 10, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
6.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00315 · 23.2th percentile
Weakness
CWE-526 · Cleartext Storage of Sensitive Information in an Environment Variable
Published
2026-10-10T23:16Z
References (4)
https://github.com/SWE-agent/mini-swe-agent · [email protected]https://github.com/SWE-agent/mini-swe-agent/blob/v2.4.6/src/minisweagent/environments/extra/bubblewrap.py#L38-L103 · [email protected]https://hackmd.io/@haind/minisweagent-bubblewrap-host-environment-leak · [email protected]https://www.vulncheck.com/advisories/mini-swe-agent-1.10.0-through-2.4.6-environment-exposure-via-bubblewrapenvironment · [email protected]
EPSS history
Timeline
  • 12 OCT 03:26Z
    EPSS moved — → 0%
    epss
  • 10 OCT 18:16Z
    mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
    cvelistv5
  • 10 OCT 18:16Z
    mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
    cvelistv5