The vulnerability allows an attacker who can place a malicious .mise.toml file in a repository to bypass trust checks that normally prohibit untrusted configuration. The file is read and loaded before the integrity verification steps, enabling execution of dangerous directives such as environment sources, templates, hooks, or tasks. As these directives can run arbitrary commands, an attacker can gain code execution within the local environment, potentially escalating privileges or compromising the host.

The affected product is mise from the jdx organization. Versions from 2026.2.18 through 2026.4.5 are impacted; later releases such as 2026.4.6 and above are not known to be affected.

The CVSS score is 7.8, indicating a high severity. The EPSS score is 0.00014 (<1%), indicating a very low probability of exploitation at the time of analysis. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local – an attacker must have the ability to place a file in a project repository, but once there the path to execute commands is straightforward. The weakness is captured by CWE-284, improper privilege management. Consequently, the risk profile is high for environments that automatically trust local configuration files.