# CWE-526.

Every Advisory and CVE whose sources give the weakness CWE-526, newest first.

## Records, newest first

- [OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)](https://agentprime.io/advisories/CVE-2026-54146.md)
  `CVE-2026-54146` · CVE record: tinyhumansai openhuman · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Broken access control, CWE-526
- [pgAdmin 4: Server passwords are left in pgAdmin's process environment](https://agentprime.io/advisories/CVE-2026-116246.md)
  `CVE-2026-116246` · CVE record: pgadmin.org pgAdmin 4 · CVSS 7.0 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-214, CWE-526
- [Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance](https://agentprime.io/advisories/CVE-2026-77938.md)
  `CVE-2026-77938` · CVE record: letta-ai letta · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-526
- [mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment](https://agentprime.io/advisories/CVE-2026-108592.md)
  `CVE-2026-108592` · CVE record: SWE-agent mini-swe-agent · CVSS 6.0 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: CWE-526
- [CodeWhale: js_execution leaks parent environment to model context via missing env scrub](https://agentprime.io/advisories/GHSA-h539-c7r8-3xq4.md)
  `GHSA-h539-c7r8-3xq4`, `CVE-2026-75915` · crates.io `codewhale-tui` and 3 more: affected `>=0.8.41, <0.8.64`, fixed in `0.8.64` · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure, CWE-526
- [Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-72648.md)
  `CVE-2026-72648` · CVE record: Elastic Eck Operator · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-526
- [In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters](https://agentprime.io/advisories/CVE-2026-49377.md)
  `CVE-2026-49377` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: CWE-526
- [hermes-agent has a sandbox issue](https://agentprime.io/advisories/GHSA-wm96-9gfh-vvgq.md)
  `GHSA-wm96-9gfh-vvgq`, `CVE-2026-9368`, `PYSEC-2026-2515` · PyPI `hermes-agent`: affected `<0.11.0`, fixed in `0.11.0` · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Privilege escalation, CWE-264, CWE-265, CWE-526
- [python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection](https://agentprime.io/advisories/GHSA-5v57-8rxj-3p2r.md)
  `GHSA-5v57-8rxj-3p2r`, `CVE-2026-45370`, `PYSEC-2026-3395` · PyPI `utcp-cli`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 7.7 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-526
- [PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool](https://agentprime.io/advisories/GHSA-v8g7-9q6v-p3x8.md)
  `GHSA-v8g7-9q6v-p3x8`, `CVE-2026-40153`, `PYSEC-2026-2953` · PyPI `praisonaiagents`: affected `<1.5.128`, fixed in `1.5.128` · CVSS 7.4 High · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-526
- [IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability](https://agentprime.io/advisories/CVE-2025-36105.md)
  `CVE-2025-36105` · CVE record: IBM Planning Analytics Advanced Certified Containers · CVSS 4.4 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-526
- [Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows](https://agentprime.io/advisories/CVE-2025-27899.md)
  `CVE-2025-27899` · CVE record: IBM DB2 Recovery Expert for LUW · CVSS 5.3 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: CWE-526
- [Child processes spawned by Renovate incorrectly have full access to environment variables](https://agentprime.io/advisories/GHSA-8wc6-vgrq-x6cf.md)
  `GHSA-8wc6-vgrq-x6cf`, `CVE-2026-76227` · npm `renovate`: affected `>=42.68.1, <42.96.3 || >=43.0.0, <43.4.4`, fixed in `42.96.3`, `43.4.4` · CVSS 6.8 Medium · Not analysed yet · Published 13 Feb 2026 · Tags: Privilege escalation, CWE-526
- [IBM Controller Information Disclosure](https://agentprime.io/advisories/CVE-2025-36017.md)
  `CVE-2025-36017` · CVE record: IBM Controller · CVSS 6.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-526
- [Keycloak Potential Variable Reference in Model Storage Services](https://agentprime.io/advisories/GHSA-8hxp-qmph-w5gq.md)
  `GHSA-8hxp-qmph-w5gq`, `CVE-2025-9162` · Maven `org.keycloak:keycloak-model-storage-services`: affected `* || >=26.3.0, <26.3.4`, fixed in `26.3.4` · CVSS 4.9 Medium · Not analysed yet · Published 8 Oct 2025 · Tags: CWE-526
- [Duplicate Advisory: Keycloak Potential Variable Reference in Model Storage Services](https://agentprime.io/advisories/GHSA-w2wj-hw98-233h.md)
  `GHSA-w2wj-hw98-233h` · Maven `org.keycloak:keycloak-model-storage-services`: affected `<=26.3.3`, no fixed version yet · CVSS 4.9 Medium · Withdrawn · Not analysed yet · Published 21 Aug 2025 · Tags: CWE-526
- [A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.](https://agentprime.io/advisories/PYSEC-2025-255.md)
  `PYSEC-2025-255`, `CVE-2025-28381` · PyPI `openc3`: affected `<=6.0.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 13 Jun 2025 · Tags: CWE-526
- [Mautic does not shield .env files from web traffic](https://agentprime.io/advisories/GHSA-h2wg-v8wg-jhxh.md)
  `GHSA-h2wg-v8wg-jhxh`, `CVE-2024-47056`, `PKSA-x5tz-t44g-gk96` · Packagist `mautic/core`: affected `>=4.4.0, <4.4.16 || >=5.0.0-alpha, <5.2.6 || >=6.0.0-alpha, <6.0.2`, fixed in `4.4.16`, `5.2.6`, `6.0.2` · CVSS 5.1 Medium · Not analysed yet · Published 28 May 2025 · Tags: Information disclosure, CWE-526
- [IBM Storage Virtualize vSphere Remote Plug-in information disclosure](https://agentprime.io/advisories/CVE-2023-43029.md)
  `CVE-2023-43029` · CVE record: IBM Storage Virtualize vSphere Remote Plug-in · CVSS 6.8 Medium · Not analysed yet · Published 21 Mar 2025 · Tags: CWE-526
- [Improper Authentication in Tapandsign Technologies Tap and Sign App](https://agentprime.io/advisories/CVE-2024-12604.md)
  `CVE-2024-12604` · CVE record: Tapandsign Technologies Tap&Sign App · CVSS 6.5 Medium · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-526, CWE-640
- [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2025-0985.md)
  `CVE-2025-0985` · CVE record: IBM MQ · CVSS 5.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-526
- [Keycloak allows unrestricted admin use of system and environment variables](https://agentprime.io/advisories/GHSA-f4v7-3mww-9gc2.md)
  `GHSA-f4v7-3mww-9gc2`, `CVE-2024-11736` · Maven `org.keycloak:keycloak-quarkus-server`: affected `<26.0.8`, fixed in `26.0.8` · CVSS 4.9 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-526
- [Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure](https://agentprime.io/advisories/CVE-2024-4369.md)
  `CVE-2024-4369` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.14 and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 30 Apr 2024 · Tags: CWE-526
- [quarkus-core leaks local environment variables from Quarkus namespace during application's build](https://agentprime.io/advisories/GHSA-f8h5-v2vg-46rr.md)
  `GHSA-f8h5-v2vg-46rr`, `CVE-2024-2700` · Maven `io.quarkus:quarkus-core`: affected `>=3.9.0.CR1, <3.9.2 || >=3.3.0.CR1, <3.8.4 || <3.2.12.Final`, fixed in `3.9.2`, `3.8.4`, `3.2.12.Final` · CVSS 7.0 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-526
- [Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain](https://agentprime.io/advisories/GHSA-p62q-5483-h57v.md)
  `GHSA-p62q-5483-h57v`, `CVE-2023-5720` · Maven `io.quarkus:quarkus-project`: affected `>=3.0.0.CR1, <=3.5.1`, no fixed version yet · CVSS 7.7 High · Not analysed yet · Published 15 Nov 2023 · Tags: CWE-526
- [Telit Cinterion BGS5: A CWE-526: Exposure of Sensitive Information Through Environmental Variables…](https://agentprime.io/advisories/CVE-2023-47615.md)
  `CVE-2023-47615` · CVE record: Telit Cinterion BGS5 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 9 Nov 2023 · Tags: CWE-526
- [Shescape potential environment variable exposure on Windows with CMD](https://agentprime.io/advisories/GHSA-3g7p-8qhx-mc8r.md)
  `GHSA-3g7p-8qhx-mc8r`, `CVE-2023-35931` · npm `shescape`: affected `<1.7.1`, fixed in `1.7.1` · CVSS 3.1 Low · Not analysed yet · Published 22 Jun 2023 · Tags: CWE-526
- [Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables](https://agentprime.io/advisories/CVE-2014-2377.md)
  `CVE-2014-2377` · CVE record: Ecava IntegraXor SCADA Server · CVSS 5.0 Medium · Not analysed yet · Published 15 Sept 2014 · Tags: CWE-526

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-526>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-526/>. Everything for agents: <https://agentprime.io/llms.txt>.