mistralai mistral-vibe

• CVE-2026-122135 High 8.8 Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program 0.5%
• CVE-2026-122134 High 8.8 Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers 0.5%
• CVE-2026-122133 High 8.8 Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe 0.4%
• CVE-2026-116843 High 8.8 Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode 0.4%
• CVE-2026-109429 High 8.8 Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform 0.6%
• CVE-2026-109428 High 8.8 Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation 0.5%
• CVE-2026-93993 High 8.8 Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout 0.8%
• CVE-2026-87988 Critical 10.0 An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these com 0.4%
• CVE-2026-87987 Critical 10.0 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignment 0.6%
• CVE-2026-87986 Critical 10.0 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from 0.6%
• CVE-2026-87985 Critical 10.0 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a c 0.6%
• CVE-2026-87984 Critical 9.3 An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirectio 0.5%
• CVE-2026-87983 Critical 9.2 An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improp 0.6%
• CVE-2026-67623 High 8.8 Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook 1.1%