Mistralai Mistral-Vibe
11 CVEs affecting Mistralai Mistral-Vibe. Latest disclosed: 2026-10-27. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-116843 | High | 8.8 | 2026-10-27 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted r… |
CVE-2026-109429 | High | 8.8 | 2026-10-13 | Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command subs… |
CVE-2026-109428 | High | 8.8 | 2026-10-13 | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing… |
CVE-2026-93993 | High | 8.8 | 2026-09-19 | Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Att… |
CVE-2026-67623 | High | 8.8 | 2026-08-05 | Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsm… |
CVE-2026-87988 | | 2026-09-11 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allow… | |
CVE-2026-87987 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments precedi… | |
CVE-2026-87986 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot inte… | |
CVE-2026-87985 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments… | |
CVE-2026-87984 | | 2026-09-11 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspac… | |
CVE-2026-87983 | | 2026-09-11 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute pa… |