VulnSocial

CVE-2026-122133

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-427

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-06: 111-06
Full discourse1 post
  • Krishna Moorthy@krishnamo0rthy

    5/ Still on the older 2.25 line? Get to 2.25.7 or newer at least. That closes CVE-2026-122134, the Git filter flaw, score 9.9. On Windows, 2.25.5 or newer closes CVE-2026-122133, score 8.8, the fake git.exe flaw. 3.0.3 or newer closes all three.

    1000035
    9 followersView on X

Explore more

Back to dashboard