Goose (1.37.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/goose-1.37.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 04 Sep 2026 15:28:11 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRemote Code Execution in Goose 1.37.0 via Malicious Recipeshttps://feed.craftedsignal.io/briefs/2026-09-goose-rce/Fri, 04 Sep 2026 15:28:11 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-goose-rce/The goose utility version 1.37.0 contains a vulnerability where insecure handling of recipe stdio extensions and retry.checks permits unvalidated arbitrary shell command execution.The goose utility, specifically version 1.37.0, contains a critical security flaw allowing for arbitrary command execution. The application processes recipe files that define stdio extensions and retry.checks configurations without performing necessary security inspections or validation. An attacker capable of providing a crafted recipe file to a user can bypass existing security scanners, which fail to examine the extensions and retry logic within these configurations. When goose processes the malicious recipe, it executes the embedded shell commands in the context of the user running the goose binary. This vulnerability enables attackers to achieve code execution on any system where a user interacts with a malicious goose recipe file. Defenders should be aware that standard security scanning of recipes may not be sufficient to catch these specific vectors.

Impact

Successful exploitation allows an attacker to execute arbitrary shell commands on the host system, potentially leading to full system compromise, data exfiltration, or persistence, depending on the privileges of the user running the goose utility. This vulnerability affects all platforms where version 1.37.0 is deployed.

Recommendation

Prioritized actions for security teams:

  • Identify and inventory all deployments of goose version 1.37.0.
  • Until an official patch is released, restrict users from importing or executing untrusted goose recipes.
  • Audit file system activity for unexpected processes spawned by the goose binary.
  • Monitor for suspicious shell execution patterns where the parent process is the goose binary.
]]>highadvisoryremote-code-executionvulnerabilitysupply-chain