{"id":"CVE-2026-85623","title":"goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection","summary":"goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe se…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"vendor":"aaif-goose","product":"goose","affected":["goose <= 1.49.0"],"published":"2026-09-04","updated":"2026-09-10","sourceUpdated":"2026-09-10T16:18:00.210","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85623","references":[{"url":"https://github.com/aaif-goose/goose","label":"disclosure@vulncheck.com"},{"url":"https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/agents/extension_manager.rs","label":"disclosure@vulncheck.com"},{"url":"https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/recipe/mod.rs","label":"disclosure@vulncheck.com"},{"url":"https://github.com/aaif-goose/goose/issues/10325","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/goose-1.37.0-arbitrary-command-execution-via-recipe-extensions","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-10T14:27:54.586430Z"},"ingestedAt":"2026-09-12T01:57:15.224Z","epss":0.00585,"epssPercentile":0.45781,"slug":"CVE-2026-85623","body":"## Overview\n\ngoose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}