Read the docs
TI-2026-26027 Aliases CVE-2026-33646GHSA-fjj5-v948-whjj

mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

Priority HIGH 76CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-94.

Summary

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the exec() function registered, enabling arbitrary command execution. Unlike .mise.toml files, .tool-versions files are not subject to trust verification in non-paranoid mode. This means an attacker can place a malicious .tool-versions file in a git repository, and when a victim with mise activated cds into the directory, arbitrary commands execute without any trust prompt. This vulnerability is fixed in 2026.3.10.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00461 40th percentileScored 2026-11-07
Fix Fixed mise (jdx): 2026.3.10mise (crates.io): 2026.3.10

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
jdxmisebefore 2026.3.102026.3.10Patch availableCNA
—mise (crates.io)before 2026.3.102026.3.10Patch availableGHSA-fjj5-v948-whjj
  • mise Vendorjdx Affected before 2026.3.10 Fixed in 2026.3.10 Patch available CNA
  • mise (crates.io) Vendor— Affected before 2026.3.10 Fixed in 2026.3.10 Patch available GHSA-fjj5-v948-whjj

Remediation

  • Fix · CNA mise (jdx) Fixed in 2026.3.10
  • Fix · GHSA-fjj5-v948-whjj mise (crates.io) Fixed in 2026.3.10 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-33646
  2. 2026-10-03 Alias added: GHSA-fjj5-v948-whjj
  3. 2026-10-26 EPSS moved to the below the 50th percentile

References

Advisory 1

Other 2

  • TI-2026-74072 Untrusted local config in mise overrides default shell arguments CVSS 3.1HIGH 7.8
  • TI-2026-27643 mise has a local settings bypass config trust checks CVSS 3.1HIGH 7.8
  • TI-2026-40014 mise: Local credential_command executes untrusted config CVSS 3.1MEDIUM 6.3
  • TI-2026-39395 mise HTTP backend uses raw version path for install symlink destination CVSS 3.1MEDIUM 5.5
  • TI-2026-40009 mise: Arbitrary command execution via task-include files in an untrusted, config-less repository CVSS 3.1HIGH 8.6
  • TI-2026-50092 mise: Incorrect file ownership, when installed by the root user using `install.sh` CVSS 3.1MEDIUM 6.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences