CVE-2026-55441

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-55441", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-16T21:59:57.017Z", "datePublished": "2026-06-26T16:48:23.194Z", "dateUpdated": "2026-06-26T18:41:26.486Z"}, "containers": {"cna": {"title": "mise: Arbitrary command execution via task-include files in an untrusted, config-less repository", "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-732", "lang": "en", "description": "CWE-732: Incorrect Permission Assignment for Critical Resource", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq"}], "affected": [{"vendor": "jdx", "product": "mise", "versions": [{"version": "< 2026.6.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-26T16:48:23.194Z"}, "descriptions": [{"lang": "en", "value": "mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, \u2026) but no config file, mise falls back to the default includes and renders each task's tera fields \u2014 and that tera environment has exec() registered. A {{ exec(command='\u2026') }} in any rendered field runs arbitrary commands the moment the tasks are merely listed. There's no config file to gate on, so no trust prompt ever appears. Read-only commands trigger it: mise tasks, mise task ls, mise run, mise tasks --usage (the query shell completion runs on Tab). The victim only has to cd into a cloned repo and list or tab-complete a task. This vulnerability is fixed in 2026.6.4."}], "source": {"advisory": "GHSA-77g9-363w-rccq", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-26T18:14:26.577413Z", "id": "CVE-2026-55441", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T18:41:26.486Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-55441", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-26T18:14:26.577413Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T18:14:27.698Z"}}], "cna": {"title": "mise: Arbitrary command execution via task-include files in an untrusted, config-less repository", "source": {"advisory": "GHSA-77g9-363w-rccq", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "jdx", "product": "mise", "versions": [{"status": "affected", "version": "< 2026.6.4"}]}], "references": [{"url": "https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq", "name": "https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, \u2026) but no config file, mise falls back to the default includes and renders each task's tera fields \u2014 and that tera environment has exec() registered. A {{ exec(command='\u2026') }} in any rendered field runs arbitrary commands the moment the tasks are merely listed. There's no config file to gate on, so no trust prompt ever appears. Read-only commands trigger it: mise tasks, mise task ls, mise run, mise tasks --usage (the query shell completion runs on Tab). The victim only has to cd into a cloned repo and list or tab-complete a task. This vulnerability is fixed in 2026.6.4."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-732", "description": "CWE-732: Incorrect Permission Assignment for Critical Resource"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-26T16:48:23.194Z"}}}, "cveMetadata": {"cveId": "CVE-2026-55441", "state": "PUBLISHED", "dateUpdated": "2026-06-26T18:41:26.486Z", "dateReserved": "2026-06-16T21:59:57.017Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-26T16:48:23.194Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "mise", "vendor": "jdx", "versions": [{"status": "affected", "version": "< 2026.6.4"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, \u2026) but no config file, mise falls back to the default includes and renders each task's tera fields \u2014 and that tera environment has exec() registered. A {{ exec(command='\u2026') }} in any rendered field runs arbitrary commands the moment the tasks are merely listed. There's no config file to gate on, so no trust prompt ever appears. Read-only commands trigger it: mise tasks, mise task ls, mise run, mise tasks --usage (the query shell completion runs on Tab). The victim only has to cd into a cloned repo and list or tab-complete a task. This vulnerability is fixed in 2026.6.4."}, {"lang": "es", "value": "mise gestiona herramientas de desarrollo como node, python, cmake y terraform. Antes de la versi\u00f3n 2026.6.4, la funci\u00f3n de confianza de mise controla los archivos de configuraci\u00f3n (mise.toml, .tool-versions) a trav\u00e9s de trust_check, pero los archivos de inclusi\u00f3n de tareas se cargan en una ruta que nunca la alcanza. Cuando un directorio tiene un directorio de inclusi\u00f3n de tareas (mise-tasks/, .mise/tasks/, ...) pero ning\u00fan archivo de configuraci\u00f3n, mise recurre a las inclusiones predeterminadas y renderiza los campos tera de cada tarea - y ese entorno tera tiene exec() registrado. Un {{ exec(command=\u2019...\u2019) }} en cualquier campo renderizado ejecuta comandos arbitrarios en el momento en que las tareas son simplemente listadas. No hay archivo de configuraci\u00f3n para controlar, por lo que nunca aparece una solicitud de confianza. Los comandos de solo lectura lo activan: mise tasks, mise task ls, mise run, mise tasks --usage (la finalizaci\u00f3n de la consulta de shell se ejecuta al presionar Tab). La v\u00edctima solo tiene que hacer cd en un repositorio clonado y listar o autocompletar una tarea. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 2026.6.4."}], "id": "CVE-2026-55441", "lastModified": "2026-10-25T17:10:00.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 6.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55441", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-26T18:14:26.577413Z", "version": "2.0.3"}}]}, "published": "2026-06-26T18:17:01.190", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}, {"lang": "en", "value": "CWE-94"}, {"lang": "en", "value": "CWE-732"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2026.6.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "mise", "source": "cna", "vendor": "jdx"}, "product": "mise", "vendor": "jdx"}], "created": "2026-06-26T19:30:04.660834+00:00", "updated": "2026-06-26T23:15:08.548843+00:00", "vendors": ["jdx", "jdx$PRODUCT$mise"]}