# CVE-2026-35533: jdx mise trust check bypass in local configuration files

Source: https://junglewise.ai/threats/cve-2026-35533-jdx-mise-trust-check-bypass-in-local-configuration-files  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-07. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2026-35533 · Severity: high · CVSS 7.7 · Published 2026-04-07

mise, a tool used by developers to manage programming environments like Node.js and Python, contains a security flaw in how it handles project configuration files. An attacker can include a specially crafted configuration file in a software repository that tricks the tool into automatically trusting it. If a user opens such a repository, the tool may automatically execute malicious scripts or commands on the user's computer without their consent.

Technologies: [mise (crates.io)](https://junglewise.ai/threats/technologies/mise). Vendors: [crates.io](https://junglewise.ai/threats/vendors/crates-io).

## Quick answers

**Is CVE-2026-35533 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-35533 being exploited in the wild.

**How severe is CVE-2026-35533?** High severity, with a CVSS score of 7.7, published 7 April 2026.

**Which products and versions are affected?** mise (crates.io) >= 2026.2.18, < 2026.6.4, SEMVER:introduced=2026.2.18,fixed=2026.6.4.

**Is there a fix for CVE-2026-35533?** Yes. mise (crates.io): upgrade to 2026.6.4 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-35533 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-35533?** Check whether you run mise (crates.io) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- mise (crates.io): upgrade to 2026.6.4 or later

  ```sh
  cargo update -p mise
  ```


## Technical details

A vulnerability in mise versions 2026.2.18 through 2026.4.5 arises because the application loads trust-related settings (such as 'trusted_config_paths', 'yes', and 'ci') from a local '.mise.toml' file before performing a trust validation check. By setting 'trusted_config_paths = ["/"]' in a malicious configuration file, an attacker can force the application to treat the untrusted file as trusted. This bypass allows the execution of dangerous directives, including '[env] _.source', templates, hooks, or tasks, when a user interacts with the affected directory (e.g., via 'mise hook-env'). The issue is resolved in version 2026.6.4 by ignoring trust-control settings in non-global configuration files.

## Affected products

- jdx mise 2026.2.18 - 2026.4.5

## Identifiers

- CVE-2026-35533
- GHSA-436v-8fw5-4mj8

## Timeline

- 2026-04-03: advisory: GitHub Security Advisory published by vendor
- 2026-04-07: disclosed: CVE published to NVD
- 2026-06-04: patched: Vendor released version 2026.6.4 to address the issue

## References

- [https://github.com/jdx/mise/security/advisories/GHSA-436v-8fw5-4mj8](https://github.com/jdx/mise/security/advisories/GHSA-436v-8fw5-4mj8)

## Related threats

- [mise untrusted local configuration shell argument injection](https://junglewise.ai/threats/cve-2026-103929-mise-permits-untrusted-local-configuration-to-override-default)
- [jdx mise OS command injection in github.credential_command](https://junglewise.ai/threats/cve-2026-55448-jdx-mise-os-command-injection-in-github-credential-command)
- [jdx mise arbitrary command execution via task-include files](https://junglewise.ai/threats/cve-2026-55441-jdx-mise-arbitrary-command-execution-via-task-include-files)
- [jdx mise path traversal in HTTP backend symlink creation](https://junglewise.ai/threats/cve-2026-54557-jdx-mise-path-traversal-in-http-backend-symlink-creation)
- [jdx mise arbitrary command execution in .tool-versions parsing](https://junglewise.ai/threats/cve-2026-33646-jdx-mise-arbitrary-command-execution-in-tool-versions-parsing)