CVE-2026-111079High· 7.4▾ TwilightA flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during que…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters sensitive data—such as API tokens, passwords, or environment variables containing secrets—in the terminal, this unredacted information is transmitted across trust boundaries. This can lead to sensitive information disclosure, exposing confidential credentials to external service providers and logs.
goose (all versions)goose (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109561Medium· 4.2goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by update_goose_mode
CVE-2026-53682Medium· 5.3An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles (security domain topology and participating subsy…
CVE-2026-85623High· 8.8goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection
CVE-2025-46421Medium· 6.8A flaw was found in libsoup
CVE-2026-115207Medium· 5.5Patch: filename validation bypass in reversal fallback allows file creation outside the working directory
CVE-2026-114406Medium· 6.8Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns