3 matches found
CVE-2026-8634
Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to forward local secrets such as API tokens, cloud credentials, and broker tokens into the remote command environment. Attackers can exploit...
9.3CVSS0.00742EPSS
SaveExploits0References4
CVE-2026-8634
Crabbox
9.3CVSS5.8AI score0.00742EPSS
SaveExploits0References4
PT-2026-41031
Name of the Vulnerable Software and Affected Versions Crabbox versions prior to 0.12.0 Description An environment variable exposure issue allows attackers with access to a malicious or compromised repository to forward local secrets, such as API tokens, cloud credentials, and broker tokens, into...
9.3CVSS5.8AI score0.00742EPSS
SaveExploits0
20