Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

Mistral Vibe could run hidden commands in terminal

CVE-2026-109429 · published 3 days ago
Summary

Versions of Mistral Vibe earlier than 2.25.4 let a specially crafted input hide a command inside a quoted variable. When the program’s prompt expands variables, the hidden command runs automatically with the same rights as the user running the agent. Upgrade to version 2.25.4 or newer, or disable Bash prompt variable expansion, to stop this behavior.

What to do
  • Update mistralai mistral-vibe to version 2.25.4 or later.
Affected software
VendorProductAffected versions
mistralai mistral-vibe < 2.25.4
Original advisory text
Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform
Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as embedding a command substitution within a single-quoted variable and re-expanding it with the ${var@P} prompt-transform operator so bash's promptvars feature executes the hidden command at runtime while only the trailing allowlisted command is classified, resulting in silent arbitrary command execution with the privileges of the agent's terminal session.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.9 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-436Interpretation Conflict
Timeline
Published13 Oct 2026
Updated15 Oct 2026
First seen13 Oct 2026
Sources
CVE-2026-109429 · NVD
CVE-2026-109429 · MITRE
CVE-2026-109429 · OSV
Track software like this
Free during beta