CVE-2026-33646: jdx mise arbitrary command execution in .tool-versions parsing

CVE-2026-33646 · Severity: critical · CVSS 9.6 · Published 2026-06-26

mise, a popular development tool manager, is vulnerable to a flaw that allows attackers to execute malicious commands on a user's computer. This occurs when a user navigates into a folder (such as a downloaded project or git repository) containing a specially crafted configuration file. Because the tool runs these commands automatically without asking for permission, an attacker could steal sensitive data, credentials, or gain full control over the developer's workstation.

Technologies: mise (crates.io). Vendors: crates.io.

Quick answers

Is CVE-2026-33646 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-33646 being exploited in the wild.
How severe is CVE-2026-33646?
Critical severity, with a CVSS score of 9.6, published 26 June 2026.
Which products and versions are affected?
mise (crates.io) < 2026.3.10, SEMVER:introduced=0,fixed=2026.3.10.
Is there a fix for CVE-2026-33646?
Yes. mise (crates.io): upgrade to 2026.3.10 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-33646 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-33646?
Check whether you run mise (crates.io) or Jdx Mise-En-Place at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • mise (crates.io): upgrade to 2026.3.10 or later
    cargo update -p mise

Technical details

mise versions prior to 2026.3.10 are vulnerable to a trust bypass and remote code execution (RCE) flaw. The application processes '.tool-versions' files through the Tera template engine during parsing. Because the 'exec()' function is registered within the Tera context and '.tool-versions' files (unlike '.mise.toml' files) are not subject to trust verification in the default configuration, arbitrary shell commands can be embedded in the file. When a user with mise shell activation enabled changes directory ('cd') into a folder containing a malicious '.tool-versions' file, the 'hook-env' trigger automatically parses the file and executes the embedded commands with the privileges of the current user. This vulnerability is fixed in version 2026.3.10.

Affected products

  • jdx mise < 2026.3.10

Identifiers

  • CVE-2026-33646
  • GHSA-fjj5-v948-whjj

Timeline

  • 2026-06-12: advisory: GitHub Security Advisory published by maintainer
  • 2026-06-26: disclosed: CVE published to NVD
  • 2026-03-10: patched: Fixed in version 2026.3.10

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.