Skip to content
OpenAdvisories

Vendor

aaif-goose

3 known vulnerabilities.

Products

goose 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-109561

    goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotations

    goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by update_goose_mode. After a session uses Smart Ap…

    aaif-goose goose