# CVE-2026-33646: jdx mise arbitrary command execution in .tool-versions parsing

Source: https://junglewise.ai/threats/cve-2026-33646-jdx-mise-arbitrary-command-execution-in-tool-versions-parsing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-26. Updated: 2026-06-26  
License: CC BY 4.0 with a link back

CVE-2026-33646 · Severity: critical · CVSS 9.6 · Published 2026-06-26

mise, a popular development tool manager, is vulnerable to a flaw that allows attackers to execute malicious commands on a user's computer. This occurs when a user navigates into a folder (such as a downloaded project or git repository) containing a specially crafted configuration file. Because the tool runs these commands automatically without asking for permission, an attacker could steal sensitive data, credentials, or gain full control over the developer's workstation.

Technologies: [mise (crates.io)](https://junglewise.ai/threats/technologies/mise). Vendors: [crates.io](https://junglewise.ai/threats/vendors/crates-io).

## Quick answers

**Is CVE-2026-33646 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-33646 being exploited in the wild.

**How severe is CVE-2026-33646?** Critical severity, with a CVSS score of 9.6, published 26 June 2026.

**Which products and versions are affected?** mise (crates.io) < 2026.3.10, SEMVER:introduced=0,fixed=2026.3.10.

**Is there a fix for CVE-2026-33646?** Yes. mise (crates.io): upgrade to 2026.3.10 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-33646 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-33646?** Check whether you run mise (crates.io) or Jdx Mise-En-Place at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- mise (crates.io): upgrade to 2026.3.10 or later

  ```sh
  cargo update -p mise
  ```


## Technical details

mise versions prior to 2026.3.10 are vulnerable to a trust bypass and remote code execution (RCE) flaw. The application processes '.tool-versions' files through the Tera template engine during parsing. Because the 'exec()' function is registered within the Tera context and '.tool-versions' files (unlike '.mise.toml' files) are not subject to trust verification in the default configuration, arbitrary shell commands can be embedded in the file. When a user with mise shell activation enabled changes directory ('cd') into a folder containing a malicious '.tool-versions' file, the 'hook-env' trigger automatically parses the file and executes the embedded commands with the privileges of the current user. This vulnerability is fixed in version 2026.3.10.

## Affected products

- jdx mise < 2026.3.10

## Identifiers

- CVE-2026-33646
- GHSA-fjj5-v948-whjj

## Timeline

- 2026-06-12: advisory: GitHub Security Advisory published by maintainer
- 2026-06-26: disclosed: CVE published to NVD
- 2026-03-10: patched: Fixed in version 2026.3.10

## References

- [https://github.com/jdx/mise/security/advisories/GHSA-fjj5-v948-whjj](https://github.com/jdx/mise/security/advisories/GHSA-fjj5-v948-whjj)

## Related threats

- [mise untrusted local configuration shell argument injection](https://junglewise.ai/threats/cve-2026-103929-mise-permits-untrusted-local-configuration-to-override-default)
- [jdx mise OS command injection in github.credential_command](https://junglewise.ai/threats/cve-2026-55448-jdx-mise-os-command-injection-in-github-credential-command)
- [jdx mise arbitrary command execution via task-include files](https://junglewise.ai/threats/cve-2026-55441-jdx-mise-arbitrary-command-execution-via-task-include-files)
- [jdx mise path traversal in HTTP backend symlink creation](https://junglewise.ai/threats/cve-2026-54557-jdx-mise-path-traversal-in-http-backend-symlink-creation)
- [jdx mise trust check bypass in local configuration files](https://junglewise.ai/threats/cve-2026-35533-jdx-mise-trust-check-bypass-in-local-configuration-files)