Skip to content
OpenAdvisories

Archive

10 October 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-108592 Public exploit

    mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment

    mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make…