CVE-2026-122133

Mistral Vibe versions before 2.25.5 on Windows are vulnerable to an untrusted search path vulnerability (CWE-427). An attacker can achieve Remote Code Execution (RCE) by placing a malicious git.exe in a repository root and luring a user into opening that repository. The application's SessionLogge...