CVE-2026-127082

Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to...

CVE-2026-127082

Huginn versions prior to 2026.11.09 are vulnerable to an information exposure flaw in the JqAgent component. The issue occurs because the jq child process inherits the server's process environment. This allows authenticated users with permissions to create, configure, or dry-run a JqAgent to supp...