Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-87985 EUVD-2026-76120GHSA-8555-f52w-mpcf

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted argume…

Published Sep 11, 2026 · Updated Sep 11, 2026 · Assigned by HiddenLayer

Description

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval.

Affected products

VendorProductAffectedFixed
mistralai mistral-vibe 2.9.0 —

References