EUVD-2026-76123
GHSA-2pcm-jhmp-6w2f
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attacker content processed automatically by the agent gives AV:N/PR:N/UI:N; arbitrary out-of-workspace file read and possible write yield C:H/I:H, no availability impact, and no demonstrated scope change (S:U).
Primary rating from Vendor (HiddenLayer).
CVSS VectorVendor: HiddenLayer
Lifecycle Timeline
3DescriptionCVE.org
An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval.
AnalysisAI
Arbitrary file access in Mistral Vibe, Mistral AI's agentic coding assistant, lets an attacker read (and potentially modify) files outside the intended workspace by abusing commands the agent treats as unconditionally allowed. Because these allowlisted commands skip path validation, the agent executes them against arbitrary filesystem paths without prompting for user approval, breaking the workspace sandbox boundary. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires that the victim is running Mistral Vibe and that the agent is induced to execute one of the commands classified as 'unconditionally allowed' - these are the exact commands that skip path validation; operations gated by normal approval or path checks are not affected. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The assigned CVSS 4.0 base score is 10.0 (AV:N/AC:L/PR:N/UI:N with VC/VI/VA:H and subsequent-system SC/SI/SA all High), but several signals warrant scrutiny. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified at time of analysis in the provided data; consult the HiddenLayer advisory (https://www.hiddenlayer.com/sai-security-advisory/2026-09-mistral-vibe6) and Mistral AI for the fixed release and upgrade as soon as one is published. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Mistral Vibe deployments across development teams and immediately take the service offline; notify all affected users of the critical risk. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Mistral Vibe
View allArbitrary code execution in Mistral Vibe (mistralai:mistral-vibe) lets an attacker defeat the agent's command-approval a
Arbitrary code execution in Mistral AI's Mistral Vibe agentic coding assistant lets attackers smuggle commands past the
Arbitrary code execution in Mistral Vibe lets attackers slip past the tool's command-approval allowlist by wrapping mali
Arbitrary file write in Mistral Vibe (the AI coding agent), introduced in version 1.3.4, lets an attacker create or over
Arbitrary file read in Mistral Vibe (Mistral AI's agentic coding assistant), introduced in version 2.6.0, lets attackers
Remote code execution in Mistral Vibe before 2.23.3 allows any attacker who can deliver a crafted repository to a victim
Share
External POC / Exploit Code
Leaving vuln.today