Executive brief
mise, a tool used by developers to manage programming environments like Node.js and Python, contains a security flaw in how it handles project configuration files. An attacker can include a specially crafted configuration file in a software repository that tricks the tool into automatically trusting it. If a user opens such a repository, the tool may automatically execute malicious scripts or commands on the user's computer without their consent.
Technical details
A vulnerability in mise versions 2026.2.18 through 2026.4.5 arises because the application loads trust-related settings (such as 'trusted_config_paths', 'yes', and 'ci') from a local '.mise.toml' file before performing a trust validation check. By setting 'trusted_config_paths = ["/"]' in a malicious configuration file, an attacker can force the application to treat the untrusted file as trusted. This bypass allows the execution of dangerous directives, including '[env] _.source', templates, hooks, or tasks, when a user interacts with the affected directory (e.g., via 'mise hook-env'). The issue is resolved in version 2026.6.4 by ignoring trust-control settings in non-global configuration files.
Affected products
- jdx mise 2026.2.18 - 2026.4.5
Timeline
- 2026-04-03: advisory: GitHub Security Advisory published by vendor
- 2026-04-07: disclosed: CVE published to NVD
- 2026-06-04: patched: Vendor released version 2026.6.4 to address the issue