HighVulnerabilityLLM-specific
CVE-2026-111079: Goose sends unsanitized terminal history to LLM provider endpoints
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-111079
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
When the terminal integration feature is enabled in Goose, the application captures shell command history and sends it verbatim, without sanitization, to configured LLM provider endpoints during queries. Secrets a user types in the terminal, such as API tokens, passwords, or environment variables, are transmitted unredacted across trust boundaries, exposing them to external providers and logs.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- Medium“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime ActivitiesSimilar attack · Palo Alto Unit 42
- MediumA Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s MuseSimilar attack · Wired (Security)
- LowMeta pauses Muse sharing after researchers find AI chats on the webSimilar attack · The Verge (AI)
- InfoDisclosure Begets Disclosure: A Self-Reinforcing Privacy Loop in LLM Agents with Persistent MemorySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoRAGLeak: Supply-Chain Privacy Backdoors in Retrieval-Augmented GenerationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)