{"id":"CVE-2026-85623","state":"PUBLISHED","title":"goose 1.37.0 Arbitrary Command Execution via Recipe Extensions","description":"goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.","publishedAt":"2026-09-04T14:32:13.978Z","updatedAt":"2026-09-10T15:08:38.210Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["aaif-goose goose"],"affected":[{"vendor":"aaif-goose","product":"goose","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.49.0","versionType":"semver"}]}],"references":["https://github.com/aaif-goose/goose/issues/10325","https://github.com/aaif-goose/goose","https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/recipe/mod.rs","https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/agents/extension_manager.rs","https://www.vulncheck.com/advisories/goose-1.37.0-arbitrary-command-execution-via-recipe-extensions"],"weaknesses":["CWE-94"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/85xxx/CVE-2026-85623.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-85623","state":"PUBLISHED","datePublished":"2026-09-04T14:32:13.978Z","dateUpdated":"2026-09-10T15:08:38.210Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-09-04T11:03:33.316Z"},"containers":{"cna":{"title":"goose 1.37.0 Arbitrary Command Execution via Recipe Extensions","descriptions":[{"lang":"en","value":"goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations."}],"affected":[{"vendor":"aaif-goose","product":"goose","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.49.0","versionType":"semver"}]}],"references":[{"url":"https://github.com/aaif-goose/goose/issues/10325","tags":["issue-tracking"],"name":"GitHub Issue #10325"},{"url":"https://github.com/aaif-goose/goose","tags":["product"]},{"url":"https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/recipe/mod.rs","tags":["technical-description"]},{"url":"https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/agents/extension_manager.rs","tags":["technical-description"]},{"url":"https://www.vulncheck.com/advisories/goose-1.37.0-arbitrary-command-execution-via-recipe-extensions","name":"VulnCheck Advisory: goose 1.37.0 Arbitrary Command Execution via Recipe Extensions","tags":["third-party-advisory"]}],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","baseScore":8.7,"baseSeverity":"HIGH"}},{"format":"CVSS","cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-94","lang":"en","description":"Improper Control of Generation of Code ('Code Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-09-04T14:32:13.978Z"},"datePublic":"2026-07-08T00:00:00.000Z","credits":[{"lang":"en","value":"George Chen","type":"finder"}],"x_generator":{"engine":"vulncheck-endgame"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-10T14:27:54.586430Z","id":"CVE-2026-85623","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-10T15:08:38.210Z"}}]}}}