A vulnerability in the mise tool manager allows unauthenticated local attackers to execute arbitrary commands by placing a malicious .mise.toml file in a project repository.

This is an improper access control vulnerability (CWE-284) where the software processes configuration directives before verifying trust. An unauthenticated attacker can exploit this by crafting a malicious .mise.toml file to trigger dangerous directives, including environment sourcing, templates, hooks, or tasks.

Successful exploitation of this flaw allows an attacker to achieve full control over the development environment, potentially leading to unauthorized access to sensitive credentials, source code, or internal systems. Given the CVSS score of 7.7, this represents a high risk for organizations relying on mise for infrastructure or application development, as it could facilitate lateral movement within the development pipeline.

Immediate Action: Update the mise package to version 2026.6.4 or later as specified in the OSV advisory to resolve the insecure configuration loading logic.

Proactive Monitoring: Monitor developer workstations and CI/CD pipelines for unexpected execution of hooks, tasks, or environment source commands originating from mise.

Compensating Controls: Implement strict repository access controls and verify the integrity of project configuration files before cloning or running tools in untrusted environments.

Public Exploit Available: Unknown.

This vulnerability presents a significant risk to development environments by bypassing intended trust boundaries. Organizations should prioritize patching all instances of the mise tool to version 2026.6.4 immediately to prevent potential command injection and system compromise.