Description
A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jet Admin | Jet Admin Cloud Platform | 0 <* | — |
Advisories 1
- VA-26-317-01 Jet Admin Cloud Platform Prompt Injection CISA ICS & IT advisories · Nov 13, 2026