EUVD-2026-117089

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusing repository-configured gpg.program during project context collection. A crafted repository setting gpg.program and log.showSignature with a signed commit makes git log execute...

CVE-2026-122135

Mistral Vibe versions before 3.0.3 are vulnerable to Remote Code Execution (RCE) during project context collection. The root cause is the abuse of repository-configured gpg.program settings; a crafted repository containing a specific gpg.program and log.showSignature setting, combined with a sign...