Mistral Vibe (< 2.25.7) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/mistral-vibe--2.25.7/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 00:21:19 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMistral Vibe: Remote code execution via Git filter drivers (CVE-2026-122134)https://feed.craftedsignal.io/briefs/2026-11-mistral-vibe-rce/Thu, 05 Nov 2026 00:21:19 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-mistral-vibe-rce/Mistral Vibe versions before 2.25.7 are vulnerable to remote code execution due to the automatic execution of git commands on untrusted repositories.Mistral Vibe prior to version 2.25.7 contains a remote code execution vulnerability (CVE-2026-122134). The vulnerability originates in the ProjectContextProvider component, which automatically executes git status when a user opens a repository. An attacker can create a crafted Git repository containing malicious clean or process filter drivers. When a user opens this repository in Mistral Vibe, the application invokes these filters, leading to arbitrary code execution with the user privileges before any user trust prompts occur.

Impact

Successful exploitation allows for arbitrary code execution on the victim's machine under the context of the user account running Mistral Vibe.

Recommendation

  • Update Mistral Vibe to version 2.25.7 or later to mitigate the vulnerability.
  • Implement endpoint policies to restrict the execution of Git processes from non-standard or untrusted directory structures if possible.
  • Monitor for child processes spawned by Mistral Vibe or Git processes initiated from unusual project directories.
]]>highadvisory