CVE-2026-85623 goose 1.37.0 Arbitrary Command Execution via Recipe Extensions
Attackers can execute arbitrary shell commands by distributing malicious recipes that bypass security scans in the Goose developer tool.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-85623?
CVE-2026-85623 is a high-severity command injection vulnerability in aaif-goose goose, published on 4 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.
Weakness: CWE-94
Which versions are affected by CVE-2026-85623?
Linux distribution packages (1)
goose openSUSE:Tumbleweed | All versions | 1.51.0-1.1 |
How do I fix CVE-2026-85623?
Apply the vendor's patch.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-85623 being exploited?
There is no known exploitation of CVE-2026-85623 in the wild and no public exploit code.
Sources
Also known as GHSA-rh2p-fw5h-rc3m, openSUSE-SU-2026:11874-1.