CVE-2026-123965: Jet Admin cloud platform prompt injection

Published Nov 13, 2026

Updated

A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026.

Affected Software

1 affected component

Jet Admin Jet Admin Cloud Platform

Event History

Nov 13, 2026

CVE Published

via MITRE·05:12 PM

Data Sourced

via MITRE·05:12 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be considered in scope for triage?

All versions of the Jet Admin Cloud Platform are affected according to the available information.

What level of access would an attacker need?

A remote attacker needs only a free account. No privileged account or user interaction is indicated.

What mitigation is reported?

The issue was mitigated through a sandbox component around October 29, 2026. The provided information does not specify any customer-side configuration changes or version-based remediation steps.

CVE-2026-123965: Jet Admin cloud platform prompt injection

Affected Software

Event History

Frequently Asked Questions

Which deployments should be considered in scope for triage?

What level of access would an attacker need?

What mitigation is reported?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be considered in scope for triage?

What level of access would an attacker need?

What mitigation is reported?