1 matches found
SWE-agent mini-swe-agent encryption issue vulnerability
Versions SWE-agent mini-swe-agent from 1.10.0 through 2.4.6 contain an encryption vulnerability. This vulnerability stems from the omission of --clearenv in BubblewrapEnvironment, allowing sandbox commands to inherit the host environment. Attackers can exploit this by injecting prompts, enabling...
6CVSS5.9AI score0.00315EPSS
SaveExploits1References4
20