---
id: "CVE-2026-123965"
page: "https://infrastack.ai/live/CVE-2026-123965"
kind: "vulnerability"
aliases: ["CVE-2026-123965"]
title: "Jet Admin Cloud Platform: prompt injection exposes .env credentials to free-account users"
severity: "critical"
cvss: 9.9
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Jet Admin Cloud Platform", "fixed": [], "affected": "all versions (per CISA)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["cloud-platform", "hosted", "jet-admin", "prompt-injection", "secrets-exposure", "vendor"]
not_affected_if: ["no-jet-admin-account"]
published_at: "2026-11-13T18:17:30+00:00"
first_seen_at: "2026-11-13T18:49:28+00:00"
updated_at: "2026-11-13T18:52:56+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123965", "first_seen_at": "2026-11-13T18:49:28+00:00"}, {"source": "analyst", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json", "first_seen_at": "2026-11-13T18:52:56+00:00", "cites": ["https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json", "https://radar.offseq.com/threat/cve-2026-123965-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-jet-admin-jet-8b3d06e3eeac2405"]}]
exploit_sources: []
---

# Jet Admin Cloud Platform: prompt injection exposes .env credentials to free-account users

Link for people: https://infrastack.ai/live/CVE-2026-123965 (this .md is for agents)

Jet Admin Cloud Platform has a prompt injection flaw in all versions. A remote attacker with a free account can make the platform expose .env configuration files and leak the credentials stored in them.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Jet Admin Cloud Platform affected all versions (per CISA) fixed no fixed version listed

## How to check

No code check is possible. If you use Jet Admin Cloud Platform, assume any secret stored in a .env or config file reachable from the platform was exposed before the sandbox mitigation (around 2026-10-29, per CISA), and rotate it. Review provider logs for unexpected use of those credentials. Also check whether you run a self-hosted or on-premise Jet Admin, which no source has confirmed either way.

## Fix

No fixed version is stated. CISA's advisory (VA-26-317-01) says it was mitigated via a sandbox component around 2026-10-29 and also lists remediation as 'none available'. Jet Admin's changelog shows no entry. Rotate credentials that were stored in .env files on the platform.

## Timeline

- 2026-11-13T18:49:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123965
- 2026-11-13T18:52:56+00:00 analyst https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json — CISA CSAF VA-26-317-01 is the only primary-ish source (coordinator, not the vendor). It says all versions affected, mitigated via sandbox around 2026-10-29, and remediation none_available. The Jet Admin changelog page returned no content, so the vendor's own statement was not read. Whether the mitigation covers hosted only and whether any version is fixed stays unknown. Nothing marked verified. No exploitation or PoC found; CISA SSVC says Exploitation:none. CVSS 9.3 (v4) and 9.9 (v3.1) from the CNA.

## Documents

- [advisory] CISA VA-26-317-01 CSAF: Jet Admin Cloud Platform Prompt Injection https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json
- [mentions] OffSeq Threat Radar: CVE-2026-123965 https://radar.offseq.com/threat/cve-2026-123965-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-jet-admin-jet-8b3d06e3eeac2405

## From the sources

A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_