The jdx mise tool manages development tools and uses a trust feature to gate config files through trust_check. However, task-include files are loaded on a path that bypasses this check. When a directory contains a task-include directory but lacks a config file, mise falls back to default includes and renders task tera fields. The tera environment registers an exec() function, enabling an attacker to inject OS commands via a {{ exec(command='...') }} expression in any rendered field. This command executes immediately when tasks are listed or tab-completed, without any user prompt. This vulnerability allows arbitrary command execution with the privileges of the user running mise. It is fixed in mise version 2026.6.4.

An attacker who can place a malicious task-include file in a directory can execute arbitrary OS commands on the victim's system when the victim lists or tab-completes tasks using mise. This can lead to full compromise of the user's environment, including confidentiality, integrity, and availability impacts. The vulnerability requires the victim to interact with the tool in a directory containing the malicious files but does not require elevated privileges or prior trust prompts.

This vulnerability is fixed in mise version 2026.6.4. Users should upgrade to version 2026.6.4 or later to remediate this issue. No official patch or temporary fix is indicated other than upgrading. Until upgraded, avoid running mise commands in untrusted directories containing task-include files.