A low-severity vulnerability exists in goose versions from 1.28.0 before 1.44.0, allowing tools to run without user approval in Manual Approval mode due to persisted read-only annotations not being cleared by update_goose_mode. This issue arises after a session uses Smart Approval mode, enabling prompt-injected calls to tools annotated with readOnlyHint: true to execute without prompting, thereby bypassin [truncated]
CVE-2026-72718 is a high-severity vulnerability in the goose AI agent that allows arbitrary command execution when reviewing a malicious repository. The issue is fixed in version 1.44.0. Affected users should upgrade to prevent exploitation. The vulnerability arises from the `goose review` command running the system `git` executable without stripping attacker-controlled Git configuration, allowing a malic [truncated]
