Vulnerabilities in mistralai
14 resultsCVE-2026-67623HIGHMistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor HookEPSS 1.1%CVE-2026-93993HIGHMistral Vibe before 2.25.5 Remote Code Execution via git post-checkoutEPSS 0.8%CVE-2026-87983CRITICALAn arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions usingEPSS 0.6%CVE-2026-87985CRITICALAn arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted argumenEPSS 0.6%CVE-2026-87986CRITICALAn arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it'sEPSS 0.6%CVE-2026-87987CRITICALAn arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable EPSS 0.6%CVE-2026-109429HIGHMistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-TransformEPSS 0.6%CVE-2026-109428HIGHMistral Vibe < 2.25.5 Permission Bypass via Bash Line ContinuationEPSS 0.5%CVE-2026-87984CRITICALAn arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside EPSS 0.5%CVE-2026-122134HIGHMistral Vibe before 2.25.7 Code Execution via Git Filter DriversEPSS 0.5%CVE-2026-122135HIGHMistral Vibe before 3.0.3 RCE via Repository-Configured gpg.programEPSS 0.5%CVE-2026-116843HIGHMistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree ModeEPSS 0.4%CVE-2026-87988CRITICALAn arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unEPSS 0.4%CVE-2026-122133HIGHMistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exeEPSS 0.4%