Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: SWE-agent Clear all filters
TI-2026-70576 CVE-2026-108592 · GHSA-p449-r4wm-3hpm

Environment variable exposure in mini-swe-agent BubblewrapEnvironment

Priority LOW 27

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00315 Published 2026-10-10 No fix listed CWE-526
TI-2026-52866 CVE-2026-75482 · GHSA-hpx7-jm9p-88gh

SWE-agent Trajectory Inspector Path Traversal File Disclosure

Priority HIGH 77

SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory ('..') ref…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00763 Published 2026-08-17 No fix listed CWE-22