CVE-2026-55448 mise: Local credential_command executes untrusted config
Attackers can execute arbitrary shell commands via malicious local config files in mise when resolving GitHub tokens.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-55448?
CVE-2026-55448 is a medium-severity command injection vulnerability in jdx mise, published on 26 Jun 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
mise manages dev tools like node, python, cmake, and terraform. From 2026.3.15 until 2026.6.4, mise loads github.credential_command from local project config before any trust decision, then executes that value with sh -c when resolving a GitHub token. An attacker who can place a .mise.toml in a repository can execute arbitrary shell commands when the victim runs a GitHub-related mise command and no higher-priority GitHub token environment variable is set. This vulnerability is fixed in 2026.6.4.
Weakness: CWE-78
Which versions are affected by CVE-2026-55448?
2 open source packages ship an affected version, including mise.
| Package | Affected | Fixed in |
|---|---|---|
mise crates.io | From 2026.3.15 | 2026.6.4 |
mise crates.io | From 2026.3.15 | 2026.6.4 |
How do I fix CVE-2026-55448?
Upgrade mise to 2026.6.4 or later.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-55448 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-55448 exists.
Sources
Also known as GHSA-29hf-rm4x-xxph.