The flaw permits an attacker to cause goose to run arbitrary shell commands by including malicious stdio extensions or retry.checks in a recipe file. This allows the command running goose, thereby compromising confidentiality, integrity, and availability of the system as a whole. The vulnerability is a classic OS command injection (CWE-78) and an evaluation of untrusted code (CWE-94).

The issue affects the aaif‑goose Goose application, specifically version 1.37.0. Later releases, such as 1.49.0, include the necessary security patches and checks to prevent command execution through recipe extensions.

The CVSS base score of 8.7 classifies this as a high‑severity vulnerability. The EPSS score of < 1% indicates a low yet nonzero exploitation probability. It is not listed in the CISA KEV catalog. The likely attack path involves an adversary delivering or authorizing a crafted recipe file that contains malicious stdio extensions or retry.checks; this can happen in environments where recipes are imported or shared without strict validation. Consequently the risk is significant for any system that runs goose with normal user privileges and accepts externally supplied recipes.