CVE-2026-85623: Improper Control of Generation of Code ('Code Injection') in aaif-goose goose

The vulnerability CVE-2026-85623 affects aaif-goose goose versions from 0 up to and including 1.49.0. The flaw arises from the execution of arbitrary commands embedded in recipe stdio extensions and retry.checks without proper security inspection. Attackers can craft malicious recipes that execute shell commands with the privileges of the user running the goose process. The recipe security scan fails to inspect these extensions or retry configurations, allowing code injection to occur.

Successful exploitation allows remote attackers to execute arbitrary shell commands on the affected system with the privileges of the goose user. This can lead to unauthorized code execution, potentially compromising system integrity and confidentiality. The CVSS 4.0 score is 8.7 (high severity), reflecting the network attack vector, low attack complexity, no privileges required, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, avoid running untrusted or unaudited recipes that include stdio extensions or retry.checks. Restrict goose execution privileges to minimize potential impact. Monitor vendor channels for official fixes or updates.