CVE-2026-109561

goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by updategoosemode. After a session uses Smart Approval mode, prompt-injected calls to...

CVE-2026-109561 goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotations

goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by updategoosemode. After a session uses Smart Approval mode, prompt-injected calls to...

CVE-2026-109561

The goose tool (versions 1.28.0 before 1.44.0 ) is vulnerable to an authorization bypass in its permission handling. The root cause is that persisted read-only annotations are not cleared by the update_goose_mode function. This allows an attacker to use prompt injection to execute tools without u...