mistralai vulnerabilities

Newest CVEs

• CVE-2026-122135

  Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program

  mistralai · mistral-vibe

  High8.6
• CVE-2026-122134

  Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers

  mistralai · mistral-vibe

  High8.6
• CVE-2026-122133

  Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

  mistralai · mistral-vibe

  High8.6
• CVE-2026-116843

  Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode

  mistralai · mistral-vibe

  High8.7
• CVE-2026-109429

  Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform

  mistralai · mistral-vibe

  High8.7
• CVE-2026-109428

  Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation

  mistralai · mistral-vibe

  High8.7
• CVE-2026-93993

  Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout

  mistralai · mistral-vibe

  High8.6
• CVE-2026-87988

  An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally…

  mistralai · mistral-vibe

  Critical10.0
• CVE-2026-87987

  An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments…

  mistralai · mistral-vibe

  Critical10.0
• CVE-2026-87986

  An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot…

  mistralai · mistral-vibe

  Critical10.0