Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-103929— mise permits untrusted local configuration to override default shell arguments

Quick assessment

Affected
jdx mise
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

mise 是一款用于管理 Node.js、Python、CMake 和 Terraform 等开发工具的版本管理器。在版本 2026.7.14 之前，当处于默认的非安全模式（non-safe mode）时，mise 会在项目获得信任批准之前，从不受信任的本地项目中加载 文件中的 配置。此时， 函数仅移除被标记为 （仅全局）的配置字段，而 、 、 和 等设置项并未被标记为 。 这一缺陷使得恶意仓库可以通过修改上述配置项，替换受信任任务（即那些没有显式指定 shell、未定义 postinstall 指令、未使用模板执

CVSS 7.8 · High EPSS 0.19% · P9

Affected Version Matrix 1

VendorProduct Version RangeStatus
jdx mise < 2026.7.14 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-103929

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mise permits untrusted local configuration to override default shell arguments
Source: CVE Program / CVE List V5
Vulnerability Description
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, and windows_default_inline_shell_args settings were not marked global_only, allowing a repository to replace the default interpreter arguments used by trusted tasks that have no explicit shell, postinstall directives, template exec operations, or hooks that fall back to the default shell. When mise appends the trusted command after the attacker-controlled interpreter arguments, the attacker-selected command can execute first with the developer account's privileges even though the local configuration was never trusted. The separate path-sanitization hardening note in the advisory is outside this vulnerability. This issue is fixed in version 2026.7.14.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
jdx mise < 2026.7.14 -

II. Public POCs for CVE-2026-103929

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-103929

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-103929 (1)

Other References for CVE-2026-103929 (2)

IV. Related Vulnerabilities

Same product: mise
Same vendor: jdx
Same weakness: CWE-78

V. Comments for CVE-2026-103929

No comments yet

Leave a comment