CVE-2026-123965
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Nov 13, 2026
Vendor
unknown
Description
A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026.