CVE-2026-123965

Name of the Vulnerable Software and Affected Versions Jet Admin Cloud Platform (affected versions not specified)

Description A prompt injection issue allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Prompt injection is a technique where specially crafted inputs are used to manipulate the behavior of a large language model to execute unintended actions.

Recommendations Update the platform to the version containing the sandbox component released around October 29, 2026.