CVE-2026-108759

Versions 0.9.0 through 0.9.4 of mistral.rs are vulnerable to a sandbox escape via a link following vulnerability in the mistralrs-code-exec component. The root cause is improper link resolution (CWE-59), which allows sandboxed shell code to read and overwrite files outside the designated sandbox ...