CVE-2026-122134

Mistral Vibe versions before 2.25.7 are vulnerable to remote code execution due to the way the application handles Git repositories. The vulnerability exists because the ProjectContextProvider._fetch_git_status function executes git status at startup, which can trigger malicious Git clean or proc...

EUVD-2026-117088

Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens a crafted repository, ProjectContextProvider.fetchgitstatus runs git status at startup,...

CVE-2026-122133

Mistral Vibe versions before 2.25.5 on Windows are vulnerable to an untrusted search path vulnerability (CWE-427). An attacker can achieve Remote Code Execution (RCE) by placing a malicious git.exe in a repository root and luring a user into opening that repository. The application's SessionLogge...

EUVD-2026-117087

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at...

PT-2026-137155

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at...

PT-2026-137156

Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens a crafted repository, ProjectContextProvider. fetch git status runs git status at startup...