CVE-2026-72718: goose review command execution through malicious repository git config

Summary

goose versions before 1.44.0 run the system git executable in the `goose review` command to gather diffs without stripping attacker-controlled Git configuration. A malicious repository whose .git/config sets core fsmonitor to a command causes Git to execute that command on the host during `git diff HEAD`, before any model call or trust prompt, with the privileges of the user running goose. The affected invocations are built by git_command() in crates/goose-cli/src/commands/review/handler.rs.

Mitigation

Fixed in 1.44.0.

Coverage

News, research and other items that mention CVE-2026-72718.

• Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker CodeThe Hacker News · 2026-09-02

Topics

• AI agents

Related items

• MediumTop MCP security resources — November 2026Similar attack · Adversa AI Blog
• MediumAI broke the cybersecurity world. What’s next?Similar attack · The Verge (AI)
• InfoGem5-Shark: Smaug-based Heterogeneous Deep Learning Accelerator Security and Robustness Evaluation and Characterization FrameworkSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoCVE-2026-123357: GROBID command execution through crafted PDF filename in Linux conversionSimilar attack · NVD/CVE Database
• MediumShai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI ToolsSimilar attack · Socket Blog