Skip to content
OpenAdvisories
High RHSA-2026:95724 1 CVE

Red Hat Security Advisory: goose security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 goose 0:1.45.0-2.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 goose-debuginfo 0:1.45.0-2.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 goose-debugsource 0:1.45.0-2.el10_2

Vulnerabilities 1

  • High 7.4
    CVE-2026-111079

    Goose: goose: shell history and environment leak via terminal integration

    A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95724.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-111079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554025
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-111079
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-111079