CVE-2026-85623 Details
Description
goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.
A vulnerability in Goose version 1.37.0 allows for arbitrary command execution through recipe standard input/output extensions and retry checks, without undergoing proper security inspection. This flaw enables attackers to create and share malicious recipes that execute shell commands as the user running Goose, circumventing the application's recipe security scan, which fails to evaluate extension commands or retry configurations.
Users should be cautious when running recipes from untrusted sources. It is recommended to review the contents of recipes, particularly the extension commands and retry checks, before execution. Additionally, Goose has introduced a consent mechanism that allows users to approve or deny recipe actions, which should be utilized.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 4, 2026CISA-ADP
Assessed Sep 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/aaif-goose/goose | [email protected] | Vendor |
| https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/agents/extension_manager.rs | [email protected] | Source CodeVendor |
| https://github.com/aaif-goose/goose/blob/v1.49.0/crates/goose/src/recipe/mod.rs | [email protected] | Source CodeVendor |
| https://github.com/aaif-goose/goose/issues/10325 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/goose-1.37.0-arbitrary-command-execution-via-recipe-extensions | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| aaif-goose goose | <= 1.49.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 10, 2026 | CVE Modified | CISA-ADP |
| Sep 4, 2026 | New CVE Received | [email protected] |