Vendor
Mistralai
14 known vulnerabilities in products by Mistralai, 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-67623 | Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook | 8.8 | |
| High | CVE-2026-93993 | Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout | 8.8 | |
| Critical | CVE-2026-87987 | Mistralai Mistral-vibe: External Control of System or Configuration Setting | — | |
| Critical | CVE-2026-87986 | Mistralai Mistral-vibe: Improper Handling of Syntactically Invalid Structure | — | |
| Critical | CVE-2026-87985 | Mistralai Mistral-vibe: Incomplete List of Disallowed Inputs | — | |
| Critical | CVE-2026-87983 | Mistralai Mistral-vibe: Path Traversal | — | |
| High | CVE-2026-109429 | Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform | 8.8 | |
| High | CVE-2026-109428 | Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation | 8.8 | |
| Critical | CVE-2026-87988 | Mistralai Mistral-vibe: Incorrect Permission Assignment for Critical Resource | — | |
| Critical | CVE-2026-87984 | Mistralai Mistral-vibe: Path Traversal | — | |
| High | CVE-2026-116843 | Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode | 8.8 | |
| High | CVE-2026-122133 | Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe | 8.8 | |
| High | CVE-2026-122135 | Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program | 8.8 | |
| High | CVE-2026-122134 | Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers | 8.8 |
Products
| Mistral-vibe | 14 | 0 |