MI
Product
mistral-vibe
11
CVEs
0
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 6High 5Medium 0Low 0
Watch
Add mistral-vibe to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87988 | 10.0 | Sep 11 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed Affected: 2.15.0 |
| CVE-2026-87987 | 10.0 | Sep 11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted… Affected: 2.6.0 |
| CVE-2026-87986 | 10.0 | Sep 11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret Affected: 1.3.4 |
| CVE-2026-87985 | 10.0 | Sep 11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments Affected: 2.9.0 |
| CVE-2026-87984 | 9.3 | Sep 11 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user… Affected: 1.3.4 |
| CVE-2026-87983 | 9.2 | Sep 11 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted… Affected: 2.6.0 |
Showing 6
