Advisories · Technology
mistralai mistral-vibe.
Every CVE that names mistralai mistral-vibe among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program
- mistralai mistral-vibe
- CWE-829
- CVSS 8.6 High
Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers
- mistralai mistral-vibe
- CWE-829
- CVSS 8.6 High
Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe
- mistralai mistral-vibe
- CWE-427
- CVSS 8.7 High
Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode
- mistralai mistral-vibe
- CWE-829
- CVSS 8.7 High
Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform
- mistralai mistral-vibe
- CWE-436
- CVSS 8.7 High
Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation
- mistralai mistral-vibe
- CWE-436
- CVSS 8.6 High
Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout
- mistralai mistral-vibe
- CWE-829
- CVSS 10.0 CriticalCritical · CVSS 9+
Incorrect permission assignment in mistralai mistral-vibe
- mistralai mistral-vibe
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands.
- mistralai mistral-vibe
- CWE-15
- CVSS 10.0 CriticalCritical · CVSS 9+
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret.
- mistralai mistral-vibe
- CWE-228
- CVSS 10.0 CriticalCritical · CVSS 9+
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments.
- mistralai mistral-vibe
- CWE-184
- CVSS 9.3 CriticalCritical · CVSS 9+
Path traversal in mistralai mistral-vibe
- mistralai mistral-vibe
- Path traversal
- CVSS 9.2 CriticalCritical · CVSS 9+
Path traversal in mistralai mistral-vibe
- mistralai mistral-vibe
- Path traversal
- CVSS 8.6 High
Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook
- mistralai mistral-vibe
- CWE-829