Skip to content
Threat Feed
Subscribe

Product

Goose (All Versions With Terminal Integration Enabled)

1 brief RSS
high advisory

Goose: Sensitive information disclosure via terminal integration (CVE-2026-111079)

Goose terminal integration transmits unredacted shell command history, including API tokens and passwords, to external LLM providers, leading to potential credential exposure.

Goose sensitive-data-exposure information-disclosure llm-security
1t 1c