Arbitrary Command Execution in Goose AI Agent Affects Multiple User Environments

CVE-2026-72718

What is CVE-2026-72718?

The Goose AI agent, a versatile general-purpose tool, contains a vulnerability that enables arbitrary command execution on the host machine. This occurs when the goose review command interacts with a malicious Git repository that has an attacker-controlled .git/config file. Specifically, configurations that set core.fsmonitor to a command can lead to unapproved execution during the execution of commands such as git diff HEAD. As this interaction happens prior to any prompts for user input or permissions, it poses a significant risk, potentially allowing attackers to access, modify files, and exfiltrate sensitive environment variables and API keys. This vulnerability has been addressed in version 1.44.0.

References