CWE-526

CWE-526 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-526, highest CVSS first.

  1. MEDIUM 6.5CVE-2026-116246public PoC2026-10-30

    To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own process environment: as PGPASSWORD for the PSQL tool, and under a per-process variable for a utility. Nothing remove…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.5CVE-2026-77938public PoC2026-10-20

    Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.3CVE-2026-108592public PoC2026-10-10

    mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make …

    AI risk analysis on Exploit-DB.ai →