Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to write to arbitrary paths accessible to the Vibe process.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
@secmatedev found two vulnerabilities in Mistral Vibe: arbitrary code execution and file access outside the workspace, both without the approval prompt users rely on. Full chain, from malicious repo to stolen Mistral token: https://blog.secmate.dev/posts/mistral-vibe-cve-2026-87987-cve-2026-87984/ https://t.co/Px5lAOqfR3
@MistralAI released fixes in Vibe 2.25.8. Thanks to their security team for the prompt action and for coordinating with us. Write-up: https://blog.secmate.dev/posts/mistral-vibe-cve-2026-87987-cve-2026-87984/ PoC: https://github.com/SecMateDev/mistral-vibe-attack-demo