https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-12T23:54:12.159040+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-108592 fkie_cve-2026-108592 2026-10-12T23:54:12.185252+00:00

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.

 https://db.gcve.eu/vuln/ghsa-p449-r4wm-3hpm GHSA-p449-r4wm-3hpm 2026-10-12T23:54:12.185333+00:00

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.