Executive brief
mise, a popular development tool manager, is vulnerable to a flaw that allows attackers to execute malicious commands on a user's computer. This occurs when a user navigates into a folder (such as a downloaded project or git repository) containing a specially crafted configuration file. Because the tool runs these commands automatically without asking for permission, an attacker could steal sensitive data, credentials, or gain full control over the developer's workstation.
Technical details
mise versions prior to 2026.3.10 are vulnerable to a trust bypass and remote code execution (RCE) flaw. The application processes '.tool-versions' files through the Tera template engine during parsing. Because the 'exec()' function is registered within the Tera context and '.tool-versions' files (unlike '.mise.toml' files) are not subject to trust verification in the default configuration, arbitrary shell commands can be embedded in the file. When a user with mise shell activation enabled changes directory ('cd') into a folder containing a malicious '.tool-versions' file, the 'hook-env' trigger automatically parses the file and executes the embedded commands with the privileges of the current user. This vulnerability is fixed in version 2026.3.10.
Affected products
- jdx mise < 2026.3.10
Timeline
- 2026-06-12: advisory: GitHub Security Advisory published by maintainer
- 2026-06-26: disclosed: CVE published to NVD
- 2026-03-10: patched: Fixed in version 2026.3.10