CVE-2026-109429Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform
Updated under an hour ago ()
Does this affect you?
It affects mistralai mistral-vibe. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.56%, higher than 46% of scored CVEs.
Do this next
Free account, 1 product
Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as embedding a command substitution within a single-quoted variable and re-expanding it with the ${var@P} prompt-transform operator so bash's promptvars feature executes the hidden command at runtime while only the trailing allowlisted command is classified, resulting in silent arbitrary command execution with the privileges of the agent's terminal session.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-436
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.56% (percentile 46)
- Assigned by
- VulnCheck
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 13, 2026
Affected products
mistralai mistral-vibe mistralai:mistral_vibe (from the name) | before 2.25.4 | CNA record |
References
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.4release-notes, patch
- https://github.com/mistralai/mistral-vibe/pull/1084issue-tracking, patch
- https://github.com/mistralai/mistral-vibe/commit/19b5b74faa78d0816b8d4d4c7d7543fc3520678cpatch, issue-tracking
- https://www.vulncheck.com/advisories/mistral-vibe-bash-permission-bypass-via-var-p-prompt-transformthird-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.