person · DiggingBeagle record
Nguyen Dinh Hai (HaiND)
Security researcher credited with the October 2026 mini-swe-agent Bubblewrap environment and zotero-mcp generic URL SSRF disclosures.
- Entity kind
- person
Record description
Nguyen Dinh Hai, also publishing as HaiND and identifying an affiliation with the Post and Telecommunication Institute of Technology, authored separate, source-level October 2026 reports on mini-swe-agent's opt-in Bubblewrap environment and on zotero-mcp's generic webpage metadata importer. His report on the former includes a synthetic environment-variable control test. His report on the latter distinguishes a generic URL-fetch sink from an earlier maintainer-fixed PDF path. Neither report establishes a real-world credential compromise, and the researcher should not be confused with the two maintainers or with the CVE assigning organization.