[asvorg]

CVE ID

CVE-2026-108592

Checklist

• [ X] Folder named 2026/CVE-2026-108592
• [ X] README.md completed using the template (CVSS, affected versions, references)
• [ X] PoC code is plain text (not zipped) and readable
• [ X] At least one public advisory/reference link included
• [ X] Original researcher credited (if applicable)
• [ X] No live credentials / real victim data / non-lab targets
• [ X] No self-propagating or mass-exploitation-ready tooling
• [ X] Binary/malware samples (if any) attached via GitHub Release, not committed directly

Summary

CVE-2026-108592 describes a potential security issue in which commands running inside a Bubblewrap sandbox may inherit environment variables from the host environment (CWE-526). Environment variables sometimes contain sensitive information, such as API keys, access tokens, and service credentials. If a sandbox exposes these values to commands that should not have access to them, sensitive information could be at risk.

Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.

This PoC uses a harmless dummy environment variable to test whether a value defined in the host environment is visible inside the sandbox.

References

• https://github.com/asvorg/CVE-2026-108592-poc
• https://www.cve.org/CVERecord?id=CVE-2026-108592
• https://nvd.nist.gov/vuln/detail/cve-2026-108592
• https://mallory.ai/vulnerabilities/CVE-2026-108592