EUVD-2026-83445
GHSA-m8f5-rh7h-vgg3
Severity by source
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Local process-table read (AV:L, AC:L); attacker needs a local account (PR:L); leaked secrets belong to other services/systems (S:C, C:H); no integrity or availability impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
4DescriptionCVE.org
microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments accepted by crates/cli/lib/sandbox_cmd.rs. Other local users or co-resident processes can read these values through the host process table, including /proc process command lines on Linux and process listings on Linux and macOS, for the lifetime of the sandbox. Exploitation does not require code execution inside the sandbox or access to the spawning user's session, and can disclose host-side API keys, tokens, and environment secrets on shared hosts, CI runners, and developer systems. This issue is fixed in version 0.5.10.
AnalysisAI
Local information disclosure in microsandbox before 0.5.10 exposes sandbox secret values - host-side API keys, tokens and environment secrets - to any other local user or co-resident process on the same host, which can simply read them from the sandbox process command line while the sandbox is running. The Rust SDK serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments, keeping them visible in /proc/<pid>/cmdline on Linux and process listings on macOS for the entire sandbox lifetime, with no code execution inside the sandbox and no access to the spawning user's session required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the attacker to be a separate local user account or a co-resident/co-tenant process on the SAME host where microsandbox (<0.5.10) is spawning sandboxes; exploitation works only while a sandbox is actively running (secrets are visible on argv for the sandbox lifetime only). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N = 6.5, Medium) is internally consistent with the description: this is a local information-exposure flaw (CWE-214), not a network-reachable or code-execution issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to microsandbox 0.5.10, the vendor-released fix, available from https://github.com/superradcompany/microsandbox/releases/tag/v0.5.10; the change is implemented via https://github.com/superradcompany/microsandbox/pull/1006 and commits 2ac6a177b11212d392bf1e7dc77aaf14e4768aa8 and fbfb2366bfafad5e6df8778183f95fd8ca3c00a4, which move the JSON LaunchConfig onto an inherited file descriptor (--config-fd) so secrets no longer appear on argv. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today