CVE-2026-108592Published
mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108592 · Microsoft / collected KEV context
cve-program · CVE-2026-108592
- https://hackmd.io/@haind/minisweagent-bubblewrap-host-environment-leak
- https://github.com/SWE-agent/mini-swe-agent/blob/v2.4.6/src/minisweagent/environments/extra/bubblewrap.py#L38-L103
- https://github.com/SWE-agent/mini-swe-agent
- https://www.vulncheck.com/advisories/mini-swe-agent-1.10.0-through-2.4.6-environment-exposure-via-bubblewrapenvironment
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.