TI-2026-26027 CVE-2026-33646 · GHSA-fjj5-v948-whjj
mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
Priority HIGH 76
mise manages dev tools like node, python, cmake, and terraform.
jdx
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
jdx records in CISA KEVNo jdx vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-74072 CVE-2026-103929 · GHSA-g74g-rg72-j2p3
Untrusted local config in mise overrides default shell arguments
Priority HIGH 69
mise manages dev tools like node, python, cmake, and terraform.
TI-2026-27643 CVE-2026-35533 · GHSA-436v-8fw5-4mj8
mise has a local settings bypass config trust checks
Priority HIGH 69
mise manages dev tools like node, python, cmake, and terraform.
TI-2026-40014 CVE-2026-55448 · GHSA-29hf-rm4x-xxph
mise: Local credential_command executes untrusted config
Priority MEDIUM 63
mise manages dev tools like node, python, cmake, and terraform.
TI-2026-39395 CVE-2026-54557 · GHSA-f94h-j2qg-fxw3
mise HTTP backend uses raw version path for install symlink destination
Priority MEDIUM 58
mise manages dev tools like node, python, cmake, and terraform.
TI-2026-40009 CVE-2026-55441 · GHSA-77g9-363w-rccq
mise: Arbitrary command execution via task-include files in an untrusted, config-less repository
Priority LOW 38
mise manages dev tools like node, python, cmake, and terraform.
TI-2026-50092 CVE-2026-71477
mise: Incorrect file ownership, when installed by the root user using `install.sh`
Priority LOW 31
mise manages dev tools like node, python, cmake, and terraform.