CVE-2026-103929 (GCVE-0-2026-103929)
Vulnerability from cvelistv5
Published
2026-10-14 15:11
Modified
2026-10-15 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, and windows_default_inline_shell_args settings were not marked global_only, allowing a repository to replace the default interpreter arguments used by trusted tasks that have no explicit shell, postinstall directives, template exec operations, or hooks that fall back to the default shell. When mise appends the trusted command after the attacker-controlled interpreter arguments, the attacker-selected command can execute first with the developer account's privileges even though the local configuration was never trusted. The separate path-sanitization hardening note in the advisory is outside this vulnerability. This issue is fixed in version 2026.7.14.
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-103929",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-15T19:11:00.898442Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T19:11:22.636Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "mise",
"vendor": "jdx",
"versions": [
{
"status": "affected",
"version": "\u003c 2026.7.14"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, and windows_default_inline_shell_args settings were not marked global_only, allowing a repository to replace the default interpreter arguments used by trusted tasks that have no explicit shell, postinstall directives, template exec operations, or hooks that fall back to the default shell. When mise appends the trusted command after the attacker-controlled interpreter arguments, the attacker-selected command can execute first with the developer account\u0027s privileges even though the local configuration was never trusted. The separate path-sanitization hardening note in the advisory is outside this vulnerability. This issue is fixed in version 2026.7.14."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T15:11:13.991Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3"
},
{
"name": "https://github.com/jdx/mise/pull/11293",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/jdx/mise/pull/11293"
},
{
"name": "https://github.com/jdx/mise/commit/c6cd7a9a2ca580918562566126646e5d04317895",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/jdx/mise/commit/c6cd7a9a2ca580918562566126646e5d04317895"
},
{
"name": "https://github.com/jdx/mise/releases/tag/v2026.7.14",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/jdx/mise/releases/tag/v2026.7.14"
}
],
"source": {
"advisory": "GHSA-g74g-rg72-j2p3",
"discovery": "UNKNOWN"
},
"title": "mise permits untrusted local configuration to override default shell arguments"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-103929",
"datePublished": "2026-10-14T15:11:13.991Z",
"dateReserved": "2026-10-01T14:20:19.155Z",
"dateUpdated": "2026-10-15T19:11:22.636Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-103929\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-15T19:11:00.898442Z\"}}}], \"references\": [{\"url\": \"https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-15T19:11:13.709Z\"}}], \"cna\": {\"title\": \"mise permits untrusted local configuration to override default shell arguments\", \"source\": {\"advisory\": \"GHSA-g74g-rg72-j2p3\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"jdx\", \"product\": \"mise\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 2026.7.14\"}]}], \"references\": [{\"url\": \"https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3\", \"name\": \"https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/jdx/mise/pull/11293\", \"name\": \"https://github.com/jdx/mise/pull/11293\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/jdx/mise/commit/c6cd7a9a2ca580918562566126646e5d04317895\", \"name\": \"https://github.com/jdx/mise/commit/c6cd7a9a2ca580918562566126646e5d04317895\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/jdx/mise/releases/tag/v2026.7.14\", \"name\": \"https://github.com/jdx/mise/releases/tag/v2026.7.14\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, and windows_default_inline_shell_args settings were not marked global_only, allowing a repository to replace the default interpreter arguments used by trusted tasks that have no explicit shell, postinstall directives, template exec operations, or hooks that fall back to the default shell. When mise appends the trusted command after the attacker-controlled interpreter arguments, the attacker-selected command can execute first with the developer account\u0027s privileges even though the local configuration was never trusted. The separate path-sanitization hardening note in the advisory is outside this vulnerability. This issue is fixed in version 2026.7.14.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-78\", \"description\": \"CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-284\", \"description\": \"CWE-284: Improper Access Control\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-10-14T15:11:13.991Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-103929\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-15T19:11:22.636Z\", \"dateReserved\": \"2026-10-01T14:20:19.155Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-10-14T15:11:13.991Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…