mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.
CVE-2026-108592
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-108592
mini-swe-agent
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/SWE-agent/mini-swe-agent",
"vendor": "SWE-agent",
"product": "mini-swe-agent",
"versions": [
{
"status": "affected",
"version": "1.10.0",
"versionType": "semver",
"lessThanOrEqual": "2.4.6"
}
],
"packageURL": "pkg:pypi/mini-swe-agent",
"collectionURL": "https://pypi.org",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-108592
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #21376 · Revision 1
- Added to Heist Feed
- Publisher date