Skip to content
OpenAdvisories

Vendor

SWE-agent

2 known vulnerabilities.

Products

SWE-agent 1 mini-swe-agent 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-108592 Public exploit

    mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment

    mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make…

    SWE-agent mini-swe-agent