CVE-2026-109561

A flaw was found in goose. An authorization bypass vulnerability allows tools to run without required user confirmation even when manual approval mode is selected. This occurs because read-only tool annotations from previous sessions are not properly cleared when switching approval modes. Consequently, an attacker could leverage prompt injection to execute tools automatically, bypassing the intended security controls.

No Red Hat products are affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.