CVE-2026-108592
Received Received - Intake

Information Exposure in Mini-Swe-Agent via BubblewrapEnvironment

Publication date: 2026-10-10

Last updated on: 2026-10-10

Assigner: VulnCheck

Description
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-10
Last Modified
2026-10-10
Generated
2026-10-10
AI Q&A
2026-10-10
EPSS Evaluated
N/A
NVD
CVE-2026-108592
EUVD
EUVD-2026-96402

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SWE-agent mini-swe-agent 1.10.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-526 The product uses an environment variable to store unencrypted sensitive information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in mini-swe-agent versions 1.10.0 through 2.4.6 involves an information exposure issue in the BubblewrapEnvironment component. The Bubblewrap sandbox fails to clear the host environment when executing commands, allowing sandboxed processes to inherit sensitive environment variables like API keys. Attackers can exploit prompt injection in task content to read these secrets and exfiltrate them over the network.

Detection Guidance

Check if mini-swe-agent versions 1.10.0 through 2.4.6 are installed by running: pip show mini-swe-agent. If installed, verify if BubblewrapEnvironment is used by inspecting configuration files or logs for sandboxed command execution without --clearenv or --unshare-net flags.

Impact Analysis

If you use mini-swe-agent with the Bubblewrap backend, attackers could steal sensitive environment variables such as API keys by tricking the agent into executing malicious commands. This could lead to unauthorized access to systems, data breaches, or further exploitation of your infrastructure.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by exposing sensitive data such as API keys or other secrets. Unauthorized access to such data may result in legal penalties, loss of trust, and failure to meet regulatory standards for data protection and confidentiality.

Mitigation Strategies

Update mini-swe-agent to a patched version that includes --clearenv and --unshare-net in default wrapper_args. If updating is not possible, manually add these flags to the BubblewrapEnvironment configuration to clear the environment and disable network access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108592. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart