Read the docs
TI-2026-81009 Aliases CVE-2026-116843GHSA-xwx6-2mm7-g8wj

Remote code execution in Mistral Vibe via Git filter drivers

Priority HIGH 73CWE-829Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-829.

Summary

Mistral Vibe before 3.0.3 trusts git filter drivers defined in an untrusted repository's .git/config (CWE-829). When started with --worktree, Vibe runs these filter commands before its trusted-folder check. An attacker who gets a user to run Vibe with --worktree in such a repository can execute commands with that user's privileges.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00433 37th percentileScored 2026-11-07
Fix Fixed mistral-vibe (mistralai): 3.0.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
mistralaimistral-vibebefore 3.0.33.0.3Patch availableCNA
  • mistral-vibe Vendormistralai Affected before 3.0.3 Fixed in 3.0.3 Patch available CNA

Remediation

Mistral Vibe 3.0.3 fixes this flaw, so upgrade mistral-vibe to version 3.0.3 or later.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

  • Fix · CNA mistral-vibe (mistralai) Fixed in 3.0.3

Timeline

  1. 2026-10-27 Threatist record created from CVE-2026-116843
  2. 2026-10-27 Alias added: GHSA-xwx6-2mm7-g8wj
  3. 2026-10-27 Priority changed: MEDIUM → LOW
  4. 2026-11-02 CISA SSVC decision points changed
  5. 2026-11-02 Priority changed: LOW → HIGH

References

Patch 1

Other 3

  • TI-2026-63252 Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout CVSS 4.0HIGH 8.6
  • TI-2026-60017 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CVSS 4.0CRITICAL 10.0
  • TI-2026-60016 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CVSS 4.0CRITICAL 10.0
  • TI-2026-60015 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CVSS 4.0CRITICAL 10.0
  • TI-2026-60018 Incorrect permission assignment in mistralai mistral-vibe CVSS 4.0CRITICAL 10.0
  • TI-2026-60014 Path traversal in mistralai mistral-vibe CVSS 4.0CRITICAL 9.3
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences