---
id: "CVE-2026-127082"
page: "https://infrastack.ai/live/CVE-2026-127082"
kind: "vulnerability"
aliases: ["CVE-2026-127082"]
title: "Huginn: JqAgent lets logged-in users read server secrets"
severity: "high"
cvss: 8.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["huginn", "package", "self-hosted"]
not_affected_if: ["jqagent-unused", "single-trusted-user"]
published_at: "2026-11-13T10:18:04+00:00"
first_seen_at: "2026-11-13T10:47:29+00:00"
updated_at: "2026-11-13T10:51:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-127082", "first_seen_at": "2026-11-13T10:47:29+00:00"}]
exploit_sources: []
---

# Huginn: JqAgent lets logged-in users read server secrets

Link for people: https://infrastack.ai/live/CVE-2026-127082 (this .md is for agents)

Huginn's JqAgent runs the jq tool as a child process that inherits the server's environment variables. A logged-in user who can create or dry-run a JqAgent can use an env or $ENV filter to read secrets such as APP_SECRET_TOKEN, database, SMTP and OAuth credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Huginn version with `git describe --tags` or the image tag; versions before `2026.11.09` are affected.
- Check whether JqAgent is in use by reviewing agents of type JqAgent in the Huginn UI or database.
- Confirm which users have accounts that can create or edit agents.

## Fix

- Huginn: upgrade to `2026.11.09` or later.

## Timeline

- 2026-11-13T10:47:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-127082

## Documents

- [advisory] Vendor advisory: github.com https://github.com/huginn/huginn/security/advisories/GHSA-3f56-748g-q34j
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/huginn-before-2026.11.09-information-exposure-via-jqagent-jq-env-builtin
- [fix] Patch: github.com https://github.com/huginn/huginn/commit/826f4bd471c027660b1951408b44f9e5c5452aff
- [fix] Release notes: github.com https://github.com/huginn/huginn/releases/tag/v2026.11.09

## From the sources

Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to disclose APP_SECRET_TOKEN, database, SMTP and OAuth secrets.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_