CVE-2026-109561

Received Received - Intake

Authorization Bypass in Goose Due to Uncleared Annotations

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulnCheck

Description

goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by update_goose_mode. After a session uses Smart Approval mode, prompt-injected calls to tools annotated readOnlyHint: true execute without prompting, bypassing the user's selected approval mode in PermissionInspector::inspect.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-109561

Affected Vendors & Products

Vendor	Product	Version / Range
aaif-goose	goose	1.28.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

The vulnerability in goose versions 1.28.0 to 1.44.0 allows tools to execute without user approval in Manual Approval mode due to a flaw where read-only annotations are not cleared during mode updates. This means that after using Smart Approval mode, tools marked as read-only can run without prompting, bypassing the user's chosen approval settings.

Impact Analysis

This vulnerability could allow unauthorized execution of tools, potentially leading to unintended actions or data exposure. Users relying on Manual Approval mode may find their systems performing actions without their consent, increasing the risk of security breaches or operational errors.

Compliance Impact

The vulnerability allows unauthorized tool execution without user approval, which could lead to unauthorized data access or processing. This may violate GDPR principles like data protection by design and default, or HIPAA requirements for access controls and audit logs.

Mitigation Strategies

Upgrade goose to version 1.44.0 or later to address the authorization bypass vulnerability in Manual Approval mode.

Hi! I’m here to help you understand CVE-2026-109561. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70