Skip to content
Threat Feed

Tag

Remote Command Execution

1 brief RSS
critical advisory

Crabbox Environment Variable Exposure Vulnerability (CVE-2026-8634)

Crabbox prior to v0.12.0 is vulnerable to environment variable exposure, allowing attackers with access to a malicious repository to forward local secrets into the remote command environment by exploiting overly permissive environment variable allowlisting and serializing sensitive environment variables into remote command execution, exposing credentials to the remote environment.

Crabbox < 0.12.0 environment variable exposure credential theft remote command execution CVE-2026-8634
2r 1t 1c