Read the docs

SWE-agent

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

SWE-agent records in CISA KEV

No SWE-agent vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-52866 CVE-2026-75482 · GHSA-hpx7-jm9p-88gh

SWE-agent Trajectory Inspector Path Traversal File Disclosure

Priority HIGH 77

SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory ('..') ref…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00763 Published 2026-08-17 No fix listed CWE-22
TI-2026-70576 CVE-2026-108592 · GHSA-p449-r4wm-3hpm

Environment variable exposure in mini-swe-agent BubblewrapEnvironment

Priority LOW 27

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00315 Published 2026-10-10 No fix listed CWE-526
Open these records in search →