Mistralai

10 CVEs across 1 Mistralai products. Browse Mistralai vulnerabilities, severities, and proof-of-concept exploits.

Mistralai products with known CVEs

ProductCVEs
Mistral-Vibe10
Mistralai CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-109429High8.82026-10-13Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command subs…
CVE-2026-109428High8.82026-10-13Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing…
CVE-2026-93993High8.82026-09-19Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Att…
CVE-2026-879882026-09-11An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allow…
CVE-2026-879872026-09-11An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments precedi…
CVE-2026-879862026-09-11An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot inte…
CVE-2026-879852026-09-11An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments…
CVE-2026-879842026-09-11An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspac…
CVE-2026-879832026-09-11An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute pa…
CVE-2026-67623High8.82026-08-05Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsm…