Skip to content
OpenAdvisories
High RHSA-2026:95723 1 CVE

Red Hat Security Advisory: goose security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::extensions goose 0:1.45.0-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::extensions goose-debuginfo 0:1.45.0-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::extensions goose-debugsource 0:1.45.0-2.el9_8

Vulnerabilities 1

  • High 7.4
    CVE-2026-111079

    Goose: goose: shell history and environment leak via terminal integration

    A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95723.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-111079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554025
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-111079
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-111079