VulnSocial

CVE-2026-87985Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-184

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-12: 2Patch / Workaround · 2026-09-12: 1Technical Details · 2026-09-12: 209-12
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Rıdvan Yağlı@ridvanyagli
    Disclosure

    🚨 Mistral Vibe'da 6 kritik güvenlik açığı! Mistral AI'nin kodlama ajanı Mistral Vibe'da CVE-2026-87983/84/85/86/87/88 numaralı 6 güvenlik açığı tespit edildi. 🔴 3 açık doğrudan RCE'ye yol açabiliyor: • CVE-2026-87985 • CVE-2026-87986 • CVE-2026-87987 Diğer açıklar ise workspace izolasyonunun aşılmasıyla arbitrary file read/write yapılmasına izin verebiliyor. Özellikle agent'ın komut izin/allowlist mekanizmasının bypass edilebilmesi dikkat çekiyor. ⚠️ Şu an için bu CVE'ler için vendor tarafından açıklanmış net bir fixed version bulunmuyor.

    Post summary

    Mistral AI’s Mistral Vibe code agent has six new CVEs disclosed, including three direct RCEs and others enabling arbitrary file read/write via workspace isolation and allowlist bypass, with no vendor patch available yet.

    00021399
    2.4K followersView on X
  • Venkata Satish Guttula 🛰️@snakeyesV1
    Patch

    News: Mistral Vibe CVE-2026-87985 (CVSS 10): ANSI-C quoting hides find -exec from the permission check, so a prompt-injected command can run as you. Update to 2.25.3+. https://www.hiddenlayer.com/sai-security-advisory/2026-09-mistral-vibe3

    Post summary

    The advisory details a high‑severity (CVSS 10) vulnerability in Mistral Vibe, explains the technical flaw, and recommends updating to version 2.25.3+ to remediate the issue.

    20010141
    3.0K followersView on X

Explore more

Back to dashboard