software · DiggingBeagle record
mini-swe-agent
Coding-agent project whose optional experimental BubblewrapEnvironment was the affected surface in CVE-2026-108592.
- Entity kind
- software
Record description
mini-swe-agent provides environments for model-directed code and command execution. The optional Linux BubblewrapEnvironment in version 2.4.6 passes filesystem-isolation arguments to bwrap but, in the inspected implementation, neither requests --clearenv nor supplies an independently sanitized subprocess environment; the default wrapper also omits --unshare-net. The published CVE lists versions 1.10.0 through 2.4.6 for this particular environment, not every mini-swe-agent installation. A researcher reproduced variable inheritance with a synthetic marker; neither real credential theft nor a verified fixing release is established by these sources.