{"id":"CVE-2026-123965","kind":"vulnerability","aliases":["CVE-2026-123965"],"related":[],"title":"Jet Admin Cloud Platform: prompt injection exposes .env credentials to free-account users","description":"A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026.","summary":"Jet Admin Cloud Platform has a prompt injection flaw in all versions. A remote attacker with a free account can make the platform expose .env configuration files and leak the credentials stored in them.","severity":"critical","cvss":9.9,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Jet Admin Cloud Platform","fixed":[],"affected":"all versions (per CISA)","ecosystem":"vendor"}],"ecosystems":[],"tags":["cloud-platform","hosted","jet-admin","prompt-injection","secrets-exposure","vendor"],"not_affected_if":["no-jet-admin-account"],"how_to_check":"No code check is possible. If you use Jet Admin Cloud Platform, assume any secret stored in a .env or config file reachable from the platform was exposed before the sandbox mitigation (around 2026-10-29, per CISA), and rotate it. Review provider logs for unexpected use of those credentials. Also check whether you run a self-hosted or on-premise Jet Admin, which no source has confirmed either way.","fix":"No fixed version is stated. CISA's advisory (VA-26-317-01) says it was mitigated via a sandbox component around 2026-10-29 and also lists remediation as 'none available'. Jet Admin's changelog shows no entry. Rotate credentials that were stored in .env files on the platform.","status":"open","published_at":"2026-11-13T18:17:30+00:00","first_seen_at":"2026-11-13T18:49:28+00:00","triaged_at":"2026-11-13T18:51:15+00:00","updated_at":"2026-11-13T18:52:56+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-13T18:51:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Jet Admin Cloud Platform: prompt injection exposes .env credentials to free-account users","impact":"high","summary":"Jet Admin Cloud Platform has a prompt injection flaw in all versions. A remote attacker with a free account can make the platform expose .env configuration files and leak the credentials stored in them.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["jet-admin","cloud-platform"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Secrets in .env files leak to a free-account attacker.","analyst_note":"Confirm from the vendor advisory whether the sandbox mitigation is a fix for hosted users only, and which versions are fixed; the NVD entry alone does not state a fixed version.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run or sign up to Jet Admin Cloud Platform, including any .env secrets stored where the platform's AI features can read them. The description says all versions are affected and that a sandbox component mitigated it around October 29, 2026, but the sources do not say whether self-hosted or hosted customers are covered by that mitigation. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000698,"input_tokens":4544,"output_tokens":487,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Confirm from the vendor advisory whether the sandbox mitigation is a fix for hosted users only, and which versions are fixed; the NVD entry alone does not state a fixed version.","search":"'-123965':17A,20A '-2026':16A,19A '2026':108C '29':107C 'account':13A,57B,90C 'admin':2A,22A,31B,40B,80C 'allow':83C 'around':105C 'attack':53B,86C 'cloud':3A,23A,26B,41B,81C 'cloud-platform':25B 'compon':104C 'configur':64B,95C 'credenti':9A,69B,100C 'critic':99C 'cve':15A,18A 'env':8A,63B,94C 'exfiltr':98C 'expos':7A,62B,92C 'exposur':37B 'file':65B,96C 'flaw':47B 'free':12A,56B,89C 'free-account':11A 'host':28B 'inject':6A,34B,46B,73C 'jet':1A,21A,30B,39B,79C 'jet-admin':29B 'leak':67B 'make':59B 'mitig':101C 'octob':106C 'platform':4A,24A,27B,42B,61B,82C 'prompt':5A,33B,45B,72C 'prompt-inject':32B 'remot':52B,85C 'sandbox':103C 'secret':36B 'secrets-exposur':35B 'sensit':93C 'store':70B 'user':14A 'vendor':38B 'version':50B,77C 'via':102C 'vulner':74C","nicknames":[],"mitigations":[],"who_affected":"Teams that use Jet Admin Cloud Platform (the hosted service, per CISA's advisory) and keep credentials in .env files or other config the platform's AI features can read. CISA lists all versions as affected and says a remote attacker with only a free account can make the platform expose .env files and leak the credentials in them. Teams that do not use Jet Admin can skip it. Whether self-hosted or on-premise Jet Admin installs are affected is not stated.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["admincloudplatform","jetadmincloudplatform"],"ptokens":["admin","cloud","jet","platform"],"labels":["cloudplatform","critical","hosted","jetadmin","promptinjection","secretsexposure","vendor"],"campaign_type":null,"search_a":"'-123965':17A,20A '-2026':16A,19A 'account':13A 'admin':2A,22A 'cloud':3A,23A 'credenti':9A 'cve':15A,18A 'env':8A 'expos':7A 'free':12A 'free-account':11A 'inject':6A 'jet':1A,21A 'platform':4A,24A 'prompt':5A 'user':14A","search_b":"'account':57B 'admin':31B,40B 'attack':53B 'cloud':26B,41B 'cloud-platform':25B 'configur':64B 'credenti':69B 'env':63B 'expos':62B 'exposur':37B 'file':65B 'flaw':47B 'free':56B 'host':28B 'inject':34B,46B 'jet':30B,39B 'jet-admin':29B 'leak':67B 'make':59B 'platform':27B,42B,61B 'prompt':33B,45B 'prompt-inject':32B 'remot':52B 'secret':36B 'secrets-exposur':35B 'store':70B 'vendor':38B 'version':50B","search_c":"'2026':108C '29':107C 'account':90C 'admin':80C 'allow':83C 'around':105C 'attack':86C 'cloud':81C 'compon':104C 'configur':95C 'credenti':100C 'critic':99C 'env':94C 'exfiltr':98C 'expos':92C 'file':96C 'free':89C 'inject':73C 'jet':79C 'mitig':101C 'octob':106C 'platform':82C 'prompt':72C 'remot':85C 'sandbox':103C 'sensit':93C 'version':77C 'via':102C 'vulner':74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T18:17:30+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"9119a7d8-5eab-497f-8521-727c672e3725","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123965","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123965","severity":null,"published_at":"2026-11-13T18:17:30+00:00","modified_at":"2026-11-13T18:17:30+00:00","first_seen_at":"2026-11-13T18:49:28+00:00","fetched_at":"2026-11-13T18:49:28+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-123965:3919","url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json","severity":null,"published_at":"2026-11-13T18:52:56+00:00","modified_at":"2026-11-13T18:52:56+00:00","first_seen_at":"2026-11-13T18:52:56+00:00","fetched_at":"2026-11-13T18:52:56+00:00","note":"CISA CSAF VA-26-317-01 is the only primary-ish source (coordinator, not the vendor). It says all versions affected, mitigated via sandbox around 2026-10-29, and remediation none_available. The Jet Admin changelog page returned no content, so the vendor's own statement was not read. Whether the mitigation covers hosted only and whether any version is fixed stays unknown. Nothing marked verified. No exploitation or PoC found; CISA SSVC says Exploitation:none. CVSS 9.3 (v4) and 9.9 (v3.1) from the CNA.","cites":["https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json","https://radar.offseq.com/threat/cve-2026-123965-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-jet-admin-jet-8b3d06e3eeac2405"]}],"documents":[{"id":148651,"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json","title":"CISA VA-26-317-01 CSAF: Jet Admin Cloud Platform Prompt Injection","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":148652,"url":"https://radar.offseq.com/threat/cve-2026-123965-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-jet-admin-jet-8b3d06e3eeac2405","title":"OffSeq Threat Radar: CVE-2026-123965","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}