CVE-2026-108592

mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.

Affected

SWE-agent · mini-swe-agent

CVSS v4.0 VULNCHECK

6.0 MEDIUMCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULNCHECK

5.3 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.32% chance of exploitation in the next 30 days, 23rd percentile

Published

2026-10-10

Updated

2026-10-14

Proof-of-concept exploits (1)

• asvorg/CVE-2026-108592-poc0★ · 2026-10-12

References

• CVE Record
• NVD entry

Related

• CVE-2026-105030
• CVE-2026-59970