CVE-2026-72718

Name of the Vulnerable Software and Affected Versions goose versions prior to 1.44.0

Description The goose review command executes the system git executable to gather diffs without stripping attacker-controlled Git configurations. A malicious repository can use the .git/config file to set the core.fsmonitor variable to a specific command, which Git then executes on the host during the index refresh performed by git diff HEAD. This execution occurs before any model contact, prompt submission, or tool approval, bypassing the tool-permission model as the process is not sandboxed. Consequently, arbitrary commands run with the privileges of the user, potentially leading to file modification, access, or the exfiltration of provider API keys and environment secrets. The issue involves the git command() function in crates/goose-cli/src/commands/review/handler.rs, which is utilized by touched files() and collect diff() for the commands git diff --name-only HEAD and git diff HEAD.

Recommendations Update goose to version 1.44.0. As a temporary workaround, avoid using the goose review command on repositories from untrusted sources.