MI
Product
mistral-vibe
by mistralai · last CVE Oct 27, 2026
11
CVEs
0
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 6High 5Medium 0Low 0
Watch

Add mistral-vibe to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-87988
10.0
0%
Sep 11
An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed
Affected: 2.15.0
CVE-2026-87987
10.0
1%
Sep 11
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted…
Affected: 2.6.0
CVE-2026-87986
10.0
1%
Sep 11
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret
Affected: 1.3.4
CVE-2026-87985
10.0
1%
Sep 11
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments
Affected: 2.9.0
CVE-2026-87984
9.3
0%
Sep 11
An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user…
Affected: 1.3.4
CVE-2026-87983
9.2
1%
Sep 11
An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted…
Affected: 2.6.0
Showing 6