CVE-2026-109428Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation
Updated under an hour ago ()
Does this affect you?
It affects mistralai mistral-vibe. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.51%, higher than 42% of scored CVEs.
Do this next
Free account, 1 product
Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.py. Attackers can craft a command string where tree-sitter-bash extracts only an allowlisted prefix such as cd while bash joins the line continuation into a materially different and hidden command such as a curl request, causing resolve_permission to grant ALWAYS permission while bash executes unauthorized arbitrary commands.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-436
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.51% (percentile 42)
- Assigned by
- VulnCheck
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 13, 2026
- First seen by InfoSec Signals
- Oct 13, 2026
Affected products
mistralai mistral-vibe mistralai:mistral_vibe (from the name) | before 2.25.5 | CNA record |
References
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5release-notes
- https://github.com/mistralai/mistral-vibe/pull/1111issue-tracking, patch
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553patch, issue-tracking
- https://www.vulncheck.com/advisories/mistral-vibe-permission-bypass-via-bash-line-continuationthird-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.