Prompt injection flaw exposed .env files in Jet Admin platform

A prompt injection vulnerability in Jet Admin Cloud Platform allowed a remote attacker holding nothing more than a free account to expose sensitive .env configuration files and exfiltrate critical credentials, according to an entry published in the US National Vulnerability Database on 13 November 2026.

The flaw is tracked as CVE-2026-123965. The NVD record states that all versions of the Jet Admin Cloud Platform were affected. It also states that the issue was mitigated via a sandbox component around 29 October 2026, which places the fix ahead of the public disclosure.

The NVD entry does not describe how the attack was carried out in detail, and it does not say whether the vulnerability was exploited against real customers. It lists references to the CVE record, a CSAF advisory file published through the US Cybersecurity and Infrastructure Security Agency's repository, and the vendor's own website and changelog.

Two parts of the description matter for anyone running similar systems. The first is the access requirement. The record says a free account was enough. That lowers the bar considerably compared with vulnerabilities that need a paid tenant, an invitation or an existing foothold, because anyone able to sign up could reach the affected functionality.

The second is what the attacker could reach. A .env file is a plain text configuration file that applications use to hold environment variables, and in practice those variables often include database passwords, API keys and other secrets. The NVD description says the flaw allowed exfiltration of critical credentials, which is the outcome you would expect if such a file is readable by an untrusted party.

Prompt injection is the root cause named in the record. In broad terms it describes an attack where text supplied by a user, or text that a model reads while doing its work, is treated by the model as an instruction rather than as data. Where a model-driven feature has access to files or tools, a successful injection can turn that access against the operator. The NVD text does not say which Jet Admin feature processed the injected input.

The stated mitigation is a sandbox component, a containment layer that restricts what the affected code can read or reach. The record does not set out what the sandbox covers or whether customers need to take any action themselves. It gives the mitigation date as approximately 29 October 2026, without a precise day.

Organisations that built internal tools on the platform may still want to treat any secrets stored in environment configuration as potentially exposed during the period before the mitigation, and rotate them. That is standard practice after credential exposure, not advice contained in the advisory.

Jet Admin's changelog and main site are cited as references in the NVD entry. No severity score, affected version range or exploitation status beyond the description above appears in the published record at the time of writing.