CVE-2026-55448

crates.io/mise CVE-2026-55448: medium 6.3, EPSS 0.16%

Mise's local credential_command executes untrusted config

Action: Upgrade mise to 2026.6.4 or later.

cargo update -p mise --precise 2026.6.4

Affected

Fixed versions

Sources

• osv: GHSA-29hf-rm4x-xxph
• https://github.com/jdx/mise/security/advisories/GHSA-29hf-rm4x-xxph
• https://github.com/jdx/mise

CVE-2026-55448 · published 2026-06-23T18:24:28Z · modified 2026-06-23T18:41:30.576100Z · JSON