EUVD-2026-117087

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at...

CVE-2026-122133

Mistral Vibe versions before 2.25.5 on Windows are vulnerable to an untrusted search path vulnerability (CWE-427). An attacker can achieve Remote Code Execution (RCE) by placing a malicious git.exe in a repository root and luring a user into opening that repository. The application's SessionLogge...

PT-2026-137155

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at...