Skip to content
OpenAdvisories

Vendor

aaif-goose

4 known vulnerabilities.

Products

goose 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2026-129128

    Goose CLI 1.35.0 before 1.53.0 contains a local code execution vulnerability that allows attackers to run commands by s…

    aaif-goose goose
  • High 8.8
    CVE-2026-85623

    goose 1.37.0 Arbitrary Command Execution via Recipe Extensions

    goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does…

    aaif-goose goose
  • High 7.0
    CVE-2026-72718

    goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor

    goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stripping attacker-controlled Git configuration. A malicious repository whose `.git…

    aaif-goose goose