Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 14

Export CSV
CVE-2026-122135

Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusing repository-configured gpg.program during project context collection. A crafted repository setting gpg.program and log.showSignature with a signed commit makes git log execute the attacker's program at session start, before any trust prompt.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-122134

Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers

Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens a crafted repository, ProjectContextProvider._fetch_git_status runs git status at startup, invoking the filters and executing commands with user privileges before any trust prompt.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-109429

Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform

Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as embedding a command substitution within a single-quoted variable and re-expanding it with the ${var@P} prompt-transform operator so bash's promptvars feature executes the hidden command at runtime while only the trailing allowlisted command is classified, resulting in silent arbitrary command execution with the privileges of the agent's terminal session.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-109428

Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation

Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.py. Attackers can craft a command string where tree-sitter-bash extracts only an allowlisted prefix such as cd while bash joins the line continuation into a materially different and hidden command such as a curl request, causing resolve_permission to grant ALWAYS permission while bash executes unauthorized arbitrary commands.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-122133

Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-116843

Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-93993

Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-87983

Arbitrary File Read via Quoted Absolute Paths in Mistral Vibe 2.6.0

An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improper handling of quotation marks during path validation enables files outside the active workspace to be read without user approval.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-87984

Arbitrary File Write via Shell Redirection in Mistral Vibe

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to write to arbitrary paths accessible to the Vibe process.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-87985

Arbitrary Code Execution via ANSI-C Quoted Argument Bypass in Mistral Vibe

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-87986

Command Permission Bypass via Unparsed Shell Constructs in Mistral Vibe

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-87987

Arbitrary Code Execution via Environment Variable Bypass in Mistral Vibe

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause arbitrary code execution without user approval.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-87988

Unrestricted File Access via Unvalidated Commands in Mistral Vibe

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe
CVE-2026-67623

Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is triggered when vibe invokes git status --porcelain without suppressing hook execution. Attackers can distribute or create a crafted repository containing a malicious fsmonitor entry to achieve arbitrary command execution with the victim's full privileges when any vibe command is run inside that repository.

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed
Vendors
Mistral
Products
Mistral-vibe