CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111079
HIGHCVSS 7.4NVD feed
Published 22 October 2026 · tracked since 23 October 2026
Description
A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters sensitive data—such as API tokens, passw
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-115356 MEDIUM 5.4
- CVE-2026-114654 MEDIUM 6.5
- CVE-2026-114644 MEDIUM 5.9
- CVE-2026-114645 MEDIUM 5.2
- CVE-2026-114612 CRITICAL 9.9
- CVE-2026-114613 HIGH 7.5
- CVE-2022-51026 CRITICAL 9.8
- CVE-2026-77156 MEDIUM 6.4
- CVE-2026-114609 MEDIUM 5.8
- CVE-2026-114610 MEDIUM 6.5