{"id":"EUVD-2026-39815","enisaUuid":"c5f8d8e8-0ea0-376f-86e1-e385e54bec23","description":"mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise\u0027s trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, …) but no config file, mise falls back to the default includes and renders each task\u0027s tera fields — and that tera environment has exec() registered. A {{ exec(command\u003d\u0027…\u0027) }} in any rendered field runs arbitrary commands the moment the tasks are merely listed. There\u0027s no config file to gate on, so no trust prompt ever appears. Read-only commands trigger it: mise tasks, mise task ls, mise run, mise tasks --usage (the query shell completion runs on Tab). The victim only has to cd into a cloned repo and list or tab-complete a task. This vulnerability is fixed in 2026.6.4.","datePublished":"Jun 26, 2026, 4:48:23 PM","dateUpdated":"Jun 26, 2026, 6:41:26 PM","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":"https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq\n","aliases":"CVE-2026-55441\nGHSA-77g9-363w-rccq\n","assigner":"GitHub_M","epss":0.18,"enisaIdProduct":[{"id":"c5305c9e-76a3-3440-806d-266a5e5f0076","product":{"name":"mise","vendor":{"name":"jdx"}},"product_version":"\u003c 2026.6.4"}],"enisaIdVendor":[{"id":"d7db136f-8331-386c-aa59-c979e68d35a9","vendor":{"name":"jdx"}}],"enisaIdVulnerability":[{"id":"68af32d4-047b-3852-8e5a-6c4d848bb814","vulnerability":{"id":"CVE-2026-55441","description":"mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise\u0027s trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, …) but no config file, mise falls back to the default includes and renders each task\u0027s tera fields — and that tera environment has exec() registered. A {{ exec(command\u003d\u0027…\u0027) }} in any rendered field runs arbitrary commands the moment the tasks are merely listed. There\u0027s no config file to gate on, so no trust prompt ever appears. Read-only commands trigger it: mise tasks, mise task ls, mise run, mise tasks --usage (the query shell completion runs on Tab). The victim only has to cd into a cloned repo and list or tab-complete a task. This vulnerability is fixed in 2026.6.4.","datePublished":"Jun 26, 2026, 4:48:23 PM","dateUpdated":"Jun 26, 2026, 6:41:26 PM","status":"PUBLISHED","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":"https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq\n","enisa_id":"EUVD-2026-39815\n","assigner":"GitHub_M","epss":0.18,"dataProcessed":"Nov 7, 2026, 7:20:15 AM","vulnerabilityProduct":[{"id":"25de1354-005a-344e-8838-b2d588924827","product":{"name":"mise","vendor":{"name":"jdx"}},"product_version":"\u003c 2026.6.4"}],"vulnerabilityVendor":[{"id":"95d83d19-bc30-303c-b173-8e28b34cc71d","vendor":{"name":"jdx"}}]}},{"id":"cbac6823-05e9-3e34-806f-d1f56aa78470","vulnerability":{"id":"GHSA-77g9-363w-rccq","description":"Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository","datePublished":"Jun 23, 2026, 6:24:08 PM","dateUpdated":"Jun 23, 2026, 6:24:08 PM","baseScore":0.0,"references":"https://github.com/jdx/mise/security/advisories/GHSA-77g9-363w-rccq\nhttps://github.com/jdx/mise\n","enisa_id":"EUVD-2026-39815\n","aliases":"GHSA-77g9-363w-rccq\nCVE-2026-55441\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}