Vulnerability · Published Oct 10, 2026 · Assigned by VulnCheck
CVE-2026-108592mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
Medium 5.3
In plain English
A medium-severity security flaw in mini-swe-agent from SWE-agent. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SWE-agent | mini-swe-agent | 1.10.0 – through 2.4.6 |
Weakness: CWE-526 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
References
- https://hackmd.io/@haind/minisweagent-bubblewrap-host-environment-leak third-party-advisory
- https://github.com/SWE-agent/mini-swe-agent/blob/v2.4.6/src/minisweagent/environments/extra/bubblewrap.py#L38-L103 technical-description
- https://github.com/SWE-agent/mini-swe-agent product
- VulnCheck Advisory: mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment third-party-advisory