Mistral Vibe on Windows: untrusted search path RCE via git.exe
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-427.
Summary
Mistral Vibe before 2.25.5 on Windows contains an untrusted search path flaw (CWE-427) that lets an attacker run code by placing git.exe in a repository root. An attacker can lure a user into opening a crafted repository, and SessionLogger and ProjectContextProvider then run the malicious git.exe at session start, before any trust prompt. The CVSS 4.0 base score is 8.6 (HIGH).
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
Description from the CNA
Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
Upgrade mistral-vibe to version 2.25.5 or later, which fixes the issue. CISA has not added this vulnerability to KEV.
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
- Fix · CNA mistral-vibe (mistralai) Fixed in 2.25.5
Timeline
- 2026-11-04 Threatist record created from CVE-2026-122133
- 2026-11-04 Alias added: GHSA-4c2h-cpg4-cvr2
- 2026-11-05 CISA SSVC decision points changed
- 2026-11-05 Priority changed: MEDIUM → LOW
References
Patch 1
Other 5
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/v2.25.5/CHANGELOG.md?plain=1#L81
- mistral-vibe v2.25.5 Release Notes
- https://github.com/mistralai/mistral-vibe/blob/v2.25.4/vibe/core/system_prompt.py#L51-L64
- https://github.com/mistralai/mistral-vibe/blob/v2.25.4/vibe/core/session/session_logger.py#L137-L141
More mistralai vulnerabilities
- TI-2026-81009 Remote code execution in Mistral Vibe via Git filter drivers CVSS 4.0HIGH 8.7
- TI-2026-63252 Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout CVSS 4.0HIGH 8.6
- TI-2026-60017 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CVSS 4.0CRITICAL 10.0
- TI-2026-60016 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CVSS 4.0CRITICAL 10.0
- TI-2026-60015 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CVSS 4.0CRITICAL 10.0
- TI-2026-60018 Incorrect permission assignment in mistralai mistral-vibe CVSS 4.0CRITICAL 10.0
Sources
- CVE-2026-122133 · CVE Program
- CVE-2026-122133 · NVD
- FIRST EPSS
- GHSA-4c2h-cpg4-cvr2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences