CVE-2026-103929

Deferred Deferred - Pending Action

Path Traversal in mise Configuration Settings

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: GitHub, Inc.

Description

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, and windows_default_inline_shell_args settings were not marked global_only, allowing a repository to replace the default interpreter arguments used by trusted tasks that have no explicit shell, postinstall directives, template exec operations, or hooks that fall back to the default shell. When mise appends the trusted command after the attacker-controlled interpreter arguments, the attacker-selected command can execute first with the developer account's privileges even though the local configuration was never trusted. The separate path-sanitization hardening note in the advisory is outside this vulnerability. This issue is fixed in version 2026.7.14.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-103929

EUVD

EUVD-2026-101154

Affected Vendors & Products

Vendor	Product	Version / Range
jdx	mise	< 2026.7.14

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability in mise allows untrusted local .mise.toml files to override default shell arguments for Unix and Windows systems before trust evaluation. The four settings (unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, windows_default_inline_shell_args) were not restricted to global configuration, enabling attackers to inject malicious commands that execute with the user's privileges when trusted tasks run.

Detection Guidance

Check if your mise version is below 2026.7.14 by running mise --version. Inspect .mise.toml files in project directories for the settings unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, or windows_default_inline_shell_args. These should only appear in global configuration if the system is vulnerable.

Impact Analysis

An attacker could place a malicious .mise.toml file in an untrusted repository. When you run mise tasks without an explicit shell, the attacker's command executes first with your privileges. This could lead to data theft, system compromise, or further attacks on your machine.

Compliance Impact

This vulnerability could lead to unauthorized command execution with user privileges, potentially enabling data exfiltration, system compromise, or further attacks. For GDPR, this may violate principles of data protection by design and default (Article 25) if user data is exposed. Under HIPAA, it could risk unauthorized access to protected health information if systems are compromised.

Mitigation Strategies

Upgrade mise to version 2026.7.14 or later immediately. Remove any local .mise.toml files containing the four shell-args settings. Configure these settings globally or per task instead. Avoid running mise commands in untrusted repositories.

Hi! I’m here to help you understand CVE-2026-103929. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70