{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amistralvibe/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mistral:vibe:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-109429"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Vibe (\u003c 2.25.4)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution","bash"],"_cs_type":"advisory","_cs_vendors":["Mistral"],"content_html":"\u003cp\u003eMistral Vibe versions prior to 2.25.4 contain a critical security vulnerability (CVE-2026-109429) involving a command permission gate bypass. The vulnerability stems from how the application handles shell command expansion, specifically failing to sanitize input against the bash 'promptvars' feature. Attackers can bypass static analysis performed by tree-sitter-bash by embedding command substitution sequences within single-quoted variable values. By utilizing the ${var@P} prompt-transform operator, an attacker forces the bash shell to re-expand and execute the hidden command at runtime. Because static parsing only evaluates the trailing allowlisted command, the malicious command executes silently with the privileges of the agent's terminal session, leading to potential full system compromise depending on the user context of the Vibe application.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized arbitrary command execution on systems running Mistral Vibe versions before 2.25.4. This bypasses existing security gates and static analysis tools, granting attackers the ability to execute code with the terminal session privileges of the Vibe agent. This risk is significant for any deployment where untrusted input is processed by the application, potentially leading to unauthorized data access, persistence, or lateral movement within the environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Mistral Vibe version 2.25.4 or later immediately to patch CVE-2026-109429.\u003c/li\u003e\n\u003cli\u003eAudit logs for shell-based execution patterns originating from the Mistral Vibe process or its child processes.\u003c/li\u003e\n\u003cli\u003eMonitor terminal sessions associated with the Vibe agent for unexpected process spawns involving bash prompt expansion syntax.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T06:22:21Z","date_published":"2026-10-14T06:22:21Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mistral-vibe-bypass/","summary":"Mistral Vibe versions before 2.25.4 are susceptible to a command permission gate bypass that enables arbitrary command execution via the bash promptvars feature.","title":"CVE-2026-109429 Command Permission Gate Bypass in Mistral Vibe","url":"https://feed.craftedsignal.io/briefs/2026-10-mistral-vibe-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mistral:vibe:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}