goose 1.37.0 Arbitrary Command Execution via Recipe Extensions
Priority MEDIUM 46CWE-94Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.
Summary
goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00585 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| aaif-goose | goose | up to 1.49.0 | — | No fix listed | CNA |
- goose Vendoraaif-goose Affected up to 1.49.0 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 2 products
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
Timeline
- 2026-10-02 Threatist record created from CVE-2026-85623
- 2026-10-03 Alias added: GHSA-rh2p-fw5h-rc3m
References
More aaif-goose vulnerabilities
- TI-2026-50953 goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor CVSS 4.0HIGH 7.0
- TI-2026-71291 Manual approval bypass in goose via read-only tool annotations CVSS 4.0LOW 2.3
Sources
- CVE-2026-85623 · CVE Program
- CVE-2026-85623 · NVD
- FIRST EPSS
- GHSA-rh2p-fw5h-rc3m · GitHub Advisory Database · CC BY 4.0
- CVE-2026-85623 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences