CVE-2026-72718 aaif-goose CVE debrief

Who should care

Users of goose AI agent versions before 1.44.0 should assess exposure and take action to secure their environment. This includes administrators and users who interact with potentially malicious repositories using goose.

Why it matters

CVE-2026-72718 is a high-severity vulnerability in the goose AI agent that allows arbitrary command execution. Users of versions before 1.44.0 should upgrade immediately and review repository configurations to prevent exploitation. The vulnerability's impact includes potential file access, secret exfiltration, and command execution with user privileges. Evidence is based on official CVE and NVD records, as well as source references from the vendor.

• Potential for arbitrary file access or modification
• Possible exfiltration of environment secrets and provider API keys
• Execution of commands with user privileges
• Need for verification of affected versions and remediation status

Technical summary

The goose AI agent, prior to version 1.44.0, uses the system 'git' executable to gather diffs for review without properly stripping attacker-controlled Git configuration. This allows malicious repositories to execute arbitrary commands on the host during the index refresh performed by 'git diff HEAD'. The commands run with the privileges and environment of the user running goose, potentially allowing file access or modification and exfiltration of environment secrets and provider API keys.

Defensive priority

High priority for users of goose AI agent versions before 1.44.0

Recommended defensive actions

• Upgrade goose to version 1.44.0 or later
• Review and restrict Git configuration in repositories used with goose
• Monitor environment for suspicious activity related to goose usage
• Verify affected versions and remediation status
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in goose AI agent versions before 1.44.0. The vulnerability allows arbitrary command execution due to insecure use of the system 'git' executable.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.