CVE-2026-85623: goose 1.37.0 Arbitrary Command Execution via Recipe Extensions
goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry configurations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
gooseto a version that resolves this vulnerability.Fixed in 1.37.0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users running goose 1.37.0 are exposed when they use a recipe containing malicious stdio extensions or retry.checks. The commands execute with the privileges of the user running goose.
What must an attacker do to exploit it?
An attacker needs to convince a user to run a malicious recipe. Exploitation does not require privileges, but it does require user interaction to execute the recipe.
Does the recipe security scan prevent exploitation?
No. The described bypass works because the recipe security scan does not inspect stdio extensions or retry configurations.