CVE-2026-55441 mise: Arbitrary command execution via task-include files in an untrusted, config-less repository
Attackers can execute arbitrary commands when victims list tasks in an untrusted repository due to missing trust checks on task-include files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-55441?
CVE-2026-55441 is a high-severity command injection vulnerability in jdx mise, published on 26 Jun 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, …) but no config file, mise falls back to the default includes and renders each task's tera fields — and that tera environment has exec() registered. A {{ exec(command='…') }} in any rendered field runs arbitrary commands the moment the tasks are merely listed. There's no config file to gate on, so no trust prompt ever appears. Read-only commands trigger it: mise tasks, mise task ls, mise run, mise tasks --usage (the query shell completion runs on Tab). The victim only has to cd into a cloned repo and list or tab-complete a task. This vulnerability is fixed in 2026.6.4.
Which versions are affected by CVE-2026-55441?
2 open source packages ship an affected version, including mise.
| Package | Affected | Fixed in |
|---|---|---|
mise crates.io | All versions | 2026.6.4 |
mise crates.io | All versions | 2026.6.4 |
How do I fix CVE-2026-55441?
Upgrade mise to 2026.6.4 or later.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-55441 being exploited?
There is no known exploitation of CVE-2026-55441 in the wild and no public exploit code.
Sources
Also known as GHSA-77g9-363w-rccq.