The vulnerability in jdx mise arises because the software loads trust-control settings from a local .mise.toml file before the trust verification process completes. This allows an attacker who can place a malicious .mise.toml file in a repository to have that file treated as trusted. Consequently, the attacker can leverage this trust to execute potentially dangerous directives including environment variable source injection, templates, hooks, or tasks. The affected versions are from 2026.2.18 through 2026.4.5. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity, no privileges, and user interaction, but results in high confidentiality, integrity, and availability impact.

Successful exploitation allows an attacker with the ability to place a malicious .mise.toml file in a repository to bypass trust controls and execute dangerous directives. This can lead to full compromise of confidentiality, integrity, and availability of the affected system or environment where mise is used. The vulnerability is rated high severity with a CVSS score of 7.8.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict write access to repositories and carefully control who can add or modify .mise.toml files to prevent malicious files from being introduced. Avoid running mise in environments where untrusted users can place or modify project files.