CVE-2026-108592
mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
SWE-agent mini-swe-agent
CVSS
6.0MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.32%Chance of exploitation activity in the next 30 days, higher than 23% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.
Text from CVE List
Affected versions 1
- mini-swe-agentaffected: 1.10.0 through 2.4.6CVE List
References 4
- hackmd.io/@haind/minisweagent-bubblewrap-host-environment-leakAdvisoryvia CVE List
- vulncheck.com/advisories/mini-swe-agent-1.10.0-through-2.4.6-environment-exposure-via-bubblewrapenvironmentAdvisoryvia CVE List
- github.com/SWE-agent/mini-swe-agent/blob/v2.4.6/src/minisweagent/environments/extra/bubblewrap.py#L38-L103Referencevia CVE List
- github.com/SWE-agent/mini-swe-agentReferencevia CVE List