Evidence · DiggingBeagle record

CVE-2026-103929: untrusted mise local config overrides default shell arguments

Upstream advisory describing local repository task interpreter options and fixed version 2026.7.14.

Source role: primary disclosure

Evidence record

Upstream advisory describing local repository task interpreter options and fixed version 2026.7.14.

Read the original source ↗

Claim-level citations (1)

supportsmise trusted tasks inherited interpreter options from an untrusted repository: mise versions through 2026.7.13 allowed repository-local configuration to alter shell argument defaults that were intended to come only from trusted global configuration.
Description; affected and patched versions