Skip to content
OpenAdvisories

Vendor

SWE-agent

2 known vulnerabilities.

Products

SWE-agent 1 mini-swe-agent 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-75482

    SWE-agent Trajectory Inspector Path Traversal File Disclosure

    SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory ('..') references, bypassing the built-in path sa…

    SWE-agent SWE-agent