CVE-2026-85623CWE-94code-injection

CVE-2026-85623

High · published September 4, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00585 · 47.2th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-09-04T19:17Z
References (5)
https://github.com/aaif-goose/goose · [email protected]https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/agents/extension_manager.rs · [email protected]https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/recipe/mod.rs · [email protected]https://github.com/aaif-goose/goose/issues/10325 · [email protected]https://www.vulncheck.com/advisories/goose-1.37.0-arbitrary-command-execution-via-recipe-extensions · [email protected]
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 04 SEP 14:32Z
    goose 1.37.0 Arbitrary Command Execution via Recipe Extensions
    cvelistv5