VulnWatch VulnWatch
← Back to dashboard
Critical nvd · CVE-2026-87985

CVE-2026-87985: An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using A

Published Sep 11, 2026 CVSS 10.0

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval.

Affected AI Products

mistral
Get the weekly digest. Every Monday: top AI security stories of the week. Free.