microsandbox: Secret values exposed in world-readable process arguments
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.
Summary
microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments accepted by crates/cli/lib/sandbox_cmd.rs. Other local users or co-resident processes can read these values through the host process table, including /proc process command lines on Linux and process listings on Linux and macOS, for the lifetime of the sandbox. Exploitation does not require code execution inside the sandbox or access to the spawning user's session, and can disclose host-side API keys, tokens, and environment secrets on shared hosts, CI runners, and developer systems. This issue is fixed in version 0.5.10.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| superradcompany | microsandbox | before 0.5.10 | 0.5.10 | Patch available | CNA |
| — | microsandbox (crates.io) | before 0.5.10 | 0.5.10 | Patch available | GHSA-m8f5-rh7h-vgg3 |
- microsandbox Vendorsuperradcompany Affected before 0.5.10 Fixed in 0.5.10 Patch available CNA
- microsandbox (crates.io) Vendor— Affected before 0.5.10 Fixed in 0.5.10 Patch available GHSA-m8f5-rh7h-vgg3
Remediation
- Fix · CNA microsandbox (superradcompany) Fixed in 0.5.10
- Fix · GHSA-m8f5-rh7h-vgg3 microsandbox (crates.io) Fixed in 0.5.10 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-61670
- 2026-10-03 Alias added: GHSA-m8f5-rh7h-vgg3
References
Other 7
- https://github.com/superradcompany/microsandbox/security/advisories/GHSA-m8f5-rh7h-vgg3
- https://github.com/superradcompany/microsandbox/issues/997
- https://github.com/superradcompany/microsandbox/pull/1006
- https://github.com/superradcompany/microsandbox/commit/2ac6a177b11212d392bf1e7dc77aaf14e4768aa8
- https://github.com/superradcompany/microsandbox/commit/fbfb2366bfafad5e6df8778183f95fd8ca3c00a4
- https://github.com/superradcompany/microsandbox/releases/tag/v0.5.10
- https://github.com/superradcompany/microsandbox
Sources
- CVE-2026-61670 · CVE Program
- CVE-2026-61670 · NVD
- FIRST EPSS
- GHSA-m8f5-rh7h-vgg3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences