MI
Vendor
mistralai
11
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116843 New | MI mistral-vibe mistralai | 8.8 | Oct 27 | Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode |
| CVE-2026-109429 | MI mistral-vibe mistralai | 8.8 | Oct 13 | Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform |
| CVE-2026-109428 | MI mistral-vibe mistralai | 8.8 | Oct 13 | Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation |
| CVE-2026-93993 | MI mistral-vibe mistralai | 8.8 | Sep 19 | Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout |
| CVE-2026-87988 | MI mistral-vibe mistralai | 10.0 | Sep 11 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed |
| CVE-2026-87987 | MI mistral-vibe mistralai | 10.0 | Sep 11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted… |
| CVE-2026-87986 | MI mistral-vibe mistralai | 10.0 | Sep 11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret |
| CVE-2026-87985 | MI mistral-vibe mistralai | 10.0 | Sep 11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments |
| CVE-2026-87984 | MI mistral-vibe mistralai | 9.3 | Sep 11 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user… |
| CVE-2026-87983 | MI mistral-vibe mistralai | 9.2 | Sep 11 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted… |
| CVE-2026-67623 | MI mistral-vibe mistralai | 8.8 | Aug 5 | Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook |