CVE-2026-33646 mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
Attackers can execute arbitrary code by placing malicious template files in repositories, bypassing trust checks in the mise developer tool.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-33646?
CVE-2026-33646 is a critical code injection vulnerability in jdx mise, published on 26 Jun 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the exec() function registered, enabling arbitrary command execution. Unlike .mise.toml files, .tool-versions files are not subject to trust verification in non-paranoid mode. This means an attacker can place a malicious .tool-versions file in a git repository, and when a victim with mise activated cds into the directory, arbitrary commands execute without any trust prompt. This vulnerability is fixed in 2026.3.10.
Weakness: CWE-94
Which versions are affected by CVE-2026-33646?
2 open source packages ship an affected version, including mise.
| Package | Affected | Fixed in |
|---|---|---|
mise crates.io | All versions | 2026.3.10 |
mise crates.io | All versions | 2026.3.10 |
How do I fix CVE-2026-33646?
Upgrade mise to 2026.3.10 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-33646 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-33646 exists.
Sources
Also known as GHSA-fjj5-v948-whjj.