---
id: "CVE-2026-129128"
page: "https://infrastack.ai/live/CVE-2026-129128"
kind: "vulnerability"
aliases: ["CVE-2026-129128"]
title: "Goose CLI: crafted repository runs commands when a developer runs review"
severity: "high"
cvss: 8.4
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-coding-agent", "ai-tooling", "developers", "git", "goose-cli"]
not_affected_if: ["goose-version-1.53.0-or-later", "no-goose-review-on-untrusted-repos"]
published_at: "2026-11-13T17:17:30+00:00"
first_seen_at: "2026-11-13T17:48:01+00:00"
updated_at: "2026-11-13T17:48:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-129128", "first_seen_at": "2026-11-13T17:48:01+00:00"}]
exploit_sources: []
---

# Goose CLI: crafted repository runs commands when a developer runs review

Link for people: https://infrastack.ai/live/CVE-2026-129128 (this .md is for agents)

Goose CLI versions 1.35.0 before 1.53.0 run git diff without --no-ext-diff, so a repository's diff.external setting in .git/config executes attacker commands. Running goose review on a crafted repository runs those commands as the user and exposes credentials and provider API keys.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Goose CLI version with `goose --version` and compare it against `1.53.0`.
- Review the affected flow: any use of `goose review` on repositories from untrusted sources.

## Fix

- Goose CLI: upgrade to `1.53.0` or later.

## Timeline

- 2026-11-13T17:48:01+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-129128

## Documents

- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/goose-cli-1.35.0-before-1.53.0-command-execution-via-goose-review-diff-external
- [fix] Patch: github.com https://github.com/aaif-goose/goose/commit/3fbea00fd44f6496ee4afe2b8b2897c3c95d63e9
- [fix] Release notes: github.com https://github.com/aaif-goose/goose/releases/tag/v1.53.0

## From the sources

Goose CLI 1.35.0 before 1.53.0 contains a local code execution vulnerability that allows attackers to run commands by setting diff.external in a repository's .git/config. Attackers can ship a crafted repository that, when the victim runs goose review, executes git diff without --no-ext-diff, running commands as the user and exposing credentials and provider API keys.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_