Mistralai vulnerabilities
We track 14 vulnerabilities in Mistralai products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Mistralai vulnerabilities
- 8.8 High severity
mistral-vibe: Inclusion of Functionality from Untrusted Control Sphere
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusing repository-configured gpg.program during project context collection. A crafted repository setting gpg.program and log.showSignature with a
- 8.8 High severity
mistral-vibe: Inclusion of Functionality from Untrusted Control Sphere
Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens a crafted repository, ProjectContextProvider._fetch_
- 8.8 High severity
mistral-vibe: Uncontrolled Search Path Element
Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextP
- 8.8 High severity
mistral-vibe: Inclusion of Functionality from Untrusted Control Sphere
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and ru
- 8.8 High severity
mistral-vibe: Interpretation Conflict
Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. At
- 8.8 High severity
mistral-vibe: Interpretation Conflict
Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in th
- 8.8 High severity
mistral-vibe: Inclusion of Functionality from Untrusted Control Sphere
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell comman
- 10.0 Critical severity
mistral-vibe: Incorrect Permission Assignment for Critical Resource
An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace w
- 10.0 Critical severity
mistral-vibe: External Control of System or Configuration Setting
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled
- 10.0 Critical severity
mistral-vibe: Improper Handling of Syntactically Invalid Structure
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the us
- 10.0 Critical severity
mistral-vibe: Incomplete List of Disallowed Inputs
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the
- 9.3 Critical severity
mistral-vibe: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling
- 9.2 Critical severity
mistral-vibe: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improper handling of quotation marks during path validation enable
- 8.8 High severity
mistral-vibe: Inclusion of Functionality from Untrusted Control Sphere
Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is triggered when vibe invokes git status --por