CVE-2026-33646
published 2026-06-26CVE-2026-33646: mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during…
PriorityP260critical9.6CVSS 3.1
AVNACLPRNUIRSCCHIHAH
EPSS
0.69%
47.9th percentile
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the exec() function registered, enabling arbitrary command execution. Unlike .mise.toml files, .tool-versions files are not subject to trust verification in non-paranoid mode. This means an attacker can place a malicious .tool-versions file in a git repository, and when a victim with mise activated cds into the directory, arbitrary commands execute without any trust prompt. This vulnerability is fixed in 2026.3.10.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jdx | mise | < 2026.3.10 | 2026.3.10 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
jdx mise up to 2026.3.9 non-paranoid Mode mise.toml exec code injection
vuldb·2026-06-26·CVSS 9.6
CVE-2026-33646 [CRITICAL] jdx mise up to 2026.3.9 non-paranoid Mode mise.toml exec code injection
A vulnerability has been found in jdx mise up to 2026.3.9 and classified as critical. This affects the function exec of the file mise.toml of the component non-paranoid Mode. The manipulation leads to code injection.
This vulnerability is documented as CVE-2026-33646. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
GHSA
Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
ghsa·2026-06-22
CVE-2026-33646 [CRITICAL] Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
## Summary
Mise processes `.tool-versions` files through the Tera template engine during parsing, with the `exec()` function registered, enabling arbitrary command execution. Unlike `.mise.toml` files, `.tool-versions` files are **not subject to trust verification** in non-paranoid mode. This means an attacker can place a malicious `.tool-versions` file in a git repository, and when a victim with mise activated `cd`s into the directory, arbitrary commands execute without any trust prompt.
## Vulnerability Details
### Vulnerable Code
**File:** `src/config/config_file/tool_versions.rs`, lines 60-63
```rust
pub fn parse_str(s: &str, path: PathBuf) -> Result {
let mut cf = Self::init(&pa
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-26
Published