Description
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusing repository-configured gpg.program during project context collection. A crafted repository setting gpg.program and log.showSignature with a signed commit makes git log execute the attacker's program at session start, before any trust prompt.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mistralai | mistral-vibe | < 3.0.3 | 3.0.3 |
References
- Patch Commit patch
- https://github.com/mistralai/mistral-vibe product
- https://github.com/mistralai/mistral-vibe/blob/v3.0.3/CHANGELOG.md?plain=1#L113 release-notes
- mistral-vibe v3.0.3 Release Notes release-notes
- https://github.com/mistralai/mistral-vibe/blob/v3.0.2/vibe/core/system_prompt.py#L52-L67 technical-description
- VulnCheck Advisory: Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program third-party-advisory