中文

// CVE · PUBLISHED 2026-11-13

CVE-2026-123965

Jet Admin / Jet Admin Cloud Platform

9.3 · CVSS 4.0Critical

Description

A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.