Lucene search
+L

1 matches found

CNNVD
CNNVD
•added 2026/10/09 4:00 p.m.•2 views

SWE-agent mini-swe-agent encryption issue vulnerability

Versions SWE-agent mini-swe-agent from 1.10.0 through 2.4.6 contain an encryption vulnerability. This vulnerability stems from the omission of --clearenv in BubblewrapEnvironment, allowing sandbox commands to inherit the host environment. Attackers can exploit this by injecting prompts, enabling...

6CVSS5.9AI score0.00315EPSS
SaveExploits1References4
Rows per page
Query Builder