Skip to content
Threat Feed
Subscribe

Vendor

Mise

1 brief RSS
critical advisory

Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

A critical vulnerability (CVE-2026-33646) in Mise allows for arbitrary code execution on victim machines via malicious `.tool-versions` files containing Tera template syntax, which are processed without trust verification, enabling silent supply chain attacks upon directory entry.

mise rce supply-chain trust-bypass code-execution developer-tools cve
1r 5t 1c