Mistral
Mistral Vibe: vulnerabilidades y CVE
Mistral Vibe tiene 8 vulnerabilidades publicadas, 8 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses8
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-93993 | Alta (8.6) | 0.77% | — | 19 sept 2026 | Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout… |
| CVE-2026-87988 | Crítica (10) | 0.43% | — | 11 sept 2026 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables… |
| CVE-2026-87987 | Crítica (10) | 0.56% | — | 11 sept 2026 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from… |
| CVE-2026-87986 | Crítica (10) | 0.56% | — | 11 sept 2026 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection,… |
| CVE-2026-87985 | Crítica (10) | 0.56% | — | 11 sept 2026 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted… |
| CVE-2026-87984 | Crítica (9.3) | 0.50% | — | 11 sept 2026 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are… |
| CVE-2026-87983 | Crítica (9.2) | 0.62% | — | 11 sept 2026 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improper handling of… |
| CVE-2026-67623 | Alta (8.6) | 1.1% | — | 5 ago 2026 | Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.