Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-109428: Mistral Vibe allows hidden commands to run

CVE-2026-109428 · published 3 days ago

Summary

Mistral Vibe versions before 2.25.5 can be tricked into running commands that were not approved. An attacker can hide a malicious command inside a line break, making the system think only a safe command was requested while the hidden command is actually executed. Update to version 2.25.5 or later to stop this behavior.

What to do

Update mistralai mistral-vibe to version 2.25.5 or later.

Affected software

Vendor	Product	Affected versions
mistralai	mistral-vibe	< 2.25.5

Original advisory text

Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation

Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.py. Attackers can craft a command string where tree-sitter-bash extracts only an allowlisted prefix such as cd while bash joins the line continuation into a materially different and hidden command such as a curl request, causing resolve_permission to grant ALWAYS permission while bash executes unauthorized arbitrary commands.

References

https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5 Vendor Advisory
https://github.com/mistralai/mistral-vibe/pull/1111 Patch
https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab... Patch
https://www.vulncheck.com/advisories/mistral-vibe-permission-bypass-via-bash-lin... Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-1094... Vendor Advisory
https://github.com/mistralai/mistral-vibe Product
https://nvd.nist.gov/vuln/detail/CVE-2026-109428 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.9 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-436Interpretation Conflict

Timeline

Published13 Oct 2026

Updated15 Oct 2026

First seen13 Oct 2026

Sources

CVE-2026-109428 · NVD

CVE-2026-109428 · MITRE

CVE-2026-109428 · OSV

Track software like this

Free during beta