6 matches found
CVE-2026-124028
mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool outputs can embed tags like to make qwen-xml, gemma4 or...
CVE-2026-124028 mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers
mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool outputs can embed tags like to make qwen-xml, gemma4 or...
CVE-2026-124028 mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers
mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool outputs can embed tags like to make qwen-xml, gemma4 or...
CVE-2026-124028 mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers
mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool outputs can embed tags like to make qwen-xml, gemma4 or...
CVE-2026-124028
Versions of mistral.rs before 0.9.5 are affected by a delimiter injection vulnerability in the mistralrs-core component. This flaw occurs because the software fails to properly neutralize delimiter strings within text quoted by the model. An attacker who controls external inputs—such as documents...
EUVD-2026-118436
mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool outputs can embed tags like to make qwen-xml, gemma4 or...