{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/mistral-vibe/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mistral_vibe:mistral_vibe:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-109428"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mistral Vibe (\u003c 2.25.5)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Mistral Vibe"],"content_html":"\u003cp\u003eMistral Vibe versions prior to 2.25.5 contain a critical permission validation bypass vulnerability (CVE-2026-109428) originating from the _extract_commands() function in bash.py. The vulnerability arises from a parsing discrepancy between the tree-sitter-bash library and the underlying bash shell when processing backslash-newline line continuations.\u003c/p\u003e\n\u003cp\u003eAn attacker can craft a malicious input string designed to deceive the application's permission checker. By using line continuation characters, the tree-sitter-bash library parses the command as a benign, allowlisted prefix (such as 'cd'), while the actual bash shell interprets the full string, including hidden commands appended after the newline. This causes the resolve_permission function to grant unauthorized access, leading to arbitrary command execution on the host. This vulnerability has a CVSS v3.1 base score of 8.8, posing a significant risk to environments where Mistral Vibe processes untrusted user input.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated or unauthorized users to execute arbitrary commands with the privileges of the Mistral Vibe application. This could lead to full system compromise, data exfiltration, or lateral movement within the network. The vulnerability affects all deployments of Mistral Vibe prior to version 2.25.5.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch Mistral Vibe to version 2.25.5 or later immediately to resolve the parsing logic error in bash.py.\u003c/li\u003e\n\u003cli\u003eAudit logs for suspicious bash executions or unusual command line arguments originating from the Mistral Vibe process tree.\u003c/li\u003e\n\u003cli\u003eRestrict the permissions of the user account running Mistral Vibe to the minimum necessary level to reduce the impact of potential command injection.\u003c/li\u003e\n\u003cli\u003eReview all inputs passed to _extract_commands() for unexpected backslash-newline character sequences that could be used to manipulate bash command interpretation.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T04:36:05Z","date_published":"2026-10-14T04:36:05Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mistral-vibe-cve/","summary":"A parsing discrepancy between tree-sitter-bash and the bash shell in Mistral Vibe allows attackers to bypass permission validation via backslash-newline line continuations to execute arbitrary commands.","title":"Permission Validation Bypass in Mistral Vibe","url":"https://feed.craftedsignal.io/briefs/2026-10-mistral-vibe-cve/"}],"language":"en","title":"CraftedSignal Threat Feed - Mistral Vibe","version":"https://jsonfeed.org/version/1.1"}