goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stripping attacker-controlled Git configuration. A malicious repository whose `.git/config` sets [`core] fsmonitor = <command>` causes Git to execute that command on the host during the index refresh performed by `git diff HEAD`. The command runs before goose contacts a model and without a submitted prompt, model call, tool approval, or trust prompt. The context-gathering Git process is not sandboxed and is outside goose's tool-permission model. Arbitrary commands run with the privileges and environment of the user running goose, allowing file access or modification and exfiltration of environment secrets and provider API keys. The vulnerable Git invocations are built by git_command() in crates/goose-cli/src/commands/review/handler.rs and are used by touched_files() and collect_diff() for `git diff --name-only HEAD` and `git diff HEAD`. This issue is fixed in version 1.44.0.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5c0d326b15 advisory.

    Update to 1.45.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cb99e9b2ac advisory.

    Update to 1.45.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-24f75e4c7a advisory.

    Update to 1.45.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command     runs the system `git` executable to gather the diff for review without stripping attacker-controlled Git     configuration. A malicious repository whose `.git/config` sets [`core] fsmonitor = <command>` causes Git     to execute that command on the host during the index refresh performed by `git diff HEAD`. The command     runs before goose contacts a model and without a submitted prompt, model call, tool approval, or trust     prompt. The context-gathering Git process is not sandboxed and is outside goose's tool-permission model.
    Arbitrary commands run with the privileges and environment of the user running goose, allowing file access     or modification and exfiltration of environment secrets and provider API keys. The vulnerable Git     invocations are built by git_command() in crates/goose-cli/src/commands/review/handler.rs and are used by     touched_files() and collect_diff() for `git diff --name-only HEAD` and `git diff HEAD`. This issue is     fixed in version 1.44.0. (CVE-2026-72718)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
350835	Fedora 43 : goose (2026-5c0d326b15)	Nessus	Fedora Local Security Checks	Local	high
350822	Fedora 45 : goose (2026-cb99e9b2ac)	Nessus	Fedora Local Security Checks	Local	high
350801	Fedora 44 : goose (2026-24f75e4c7a)	Nessus	Fedora Local Security Checks	Local	high
334935	Linux Distros Unpatched Vulnerability : CVE-2026-72718	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-72718

high

Tenable Plugins

high

high

high

high