jdx mise up to 2026.7.13 Trust Mechanism .mise.toml privileges management

Summaryinfo

A vulnerability was found in jdx mise up to 2026.7.13. It has been rated as problematic. This issue affects some unknown processing of the file .mise.toml of the component Trust Mechanism. The manipulation of the argument unix_default_file_shell_args/unix_default_inline_shell_args/windows_default_file_shell_args/windows_default_inline_shell_args leads to privileges management. This vulnerability is documented as CVE-2026-103929. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in jdx mise up to 2026.7.13. This issue affects an unknown function of the file .mise.toml of the component Trust Mechanism. The manipulation of the argument unix_default_file_shell_args/unix_default_inline_shell_args/windows_default_file_shell_args/windows_default_inline_shell_args with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The unix_default_file_shell_args, unix_default_inline_shell_args, windows_default_file_shell_args, and windows_default_inline_shell_args settings were not marked global_only, allowing a repository to replace the default interpreter arguments used by trusted tasks that have no explicit shell, postinstall directives, template exec operations, or hooks that fall back to the default shell. When mise appends the trusted command after the attacker-controlled interpreter arguments, the attacker-selected command can execute first with the developer account's privileges even though the local configuration was never trusted. The separate path-sanitization hardening note in the advisory is outside this vulnerability. This issue is fixed in version 2026.7.14.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-103929 since 10/01/2026. The exploitation is known to be easy. Attacking locally is a requirement. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Upgrading to version 2026.7.14 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• jdx

Name

• mise

Version

• 2026.7.0
• 2026.7.1
• 2026.7.2
• 2026.7.3
• 2026.7.4
• 2026.7.5
• 2026.7.6
• 2026.7.7
• 2026.7.8
• 2026.7.9
• 2026.7.10
• 2026.7.11
• 2026.7.12
• 2026.7.13

Website

• Product: https://github.com/jdx/mise/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion