Mistralai Mistral-Vibe
8 CVEs affecting Mistralai Mistral-Vibe. Latest disclosed: 2026-09-19. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-93993 | High | 8.8 | 2026-09-19 | Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Att… |
CVE-2026-67623 | High | 8.8 | 2026-08-05 | Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsm… |
CVE-2026-87988 | | 2026-09-11 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allow… | |
CVE-2026-87987 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments precedi… | |
CVE-2026-87986 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot inte… | |
CVE-2026-87985 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments… | |
CVE-2026-87984 | | 2026-09-11 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspac… | |
CVE-2026-87983 | | 2026-09-11 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute pa… |