VYPR

Vibe

by Mistral

CVEs (3)

  • CVE-2026-87987CriSep 11, 2026
    risk 0.65cvss epss

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment…

  • CVE-2026-87984CriSep 11, 2026
    risk 0.60cvss epss

    An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise…

  • CVE-2026-87983CriSep 11, 2026
    risk 0.60cvss epss

    An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improper handling of quotation marks during path validation enables files outside the…