This vulnerability allows a local attacker with file‑system access to a project to create or modify a .mise.toml file that overrides the default shell arguments for tasks. Because mise runs in its default non‑safe mode it loads this configuration before checking for trust, and the affected settings were not marked as global only. As a result, the attacker’s interpreter arguments are inserted before the legitimate task command, causing the attacker‑controlled command to execute with the user’s privileges. The consequence is that arbitrary commands can run on the developer’s machine, effectively providing local privilege escalation or command injection.

All installations of the development tool mise with versions earlier than 2026.7.14 are affected. This includes any distributions of mise that run with the default non‑safe mode on Linux, macOS, or Windows. Users who have not yet upgraded beyond v2026.7.13 are susceptible.

The CVSS score of 7.8 indicates high severity. The EPSS score is <1%, suggesting a low probability of exploitation, and the issue is not listed in the CISA KEV catalog. Exploitation requires the attacker to place a crafted .mise.toml file in a directory where tasks will be executed, which is typically possible for anyone with local access to the project. Once present, mise will prepend the malicious shell arguments before the trusted command, allowing the attacker‑controlled command to run first with developer‑level privileges.