{"id":"CVE-2026-109428","published":"2026-10-13T19:18:33.097","lastModified":"2026-10-13T19:30:29.797","description":"Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.py. Attackers can craft a command string where tree-sitter-bash extracts only an allowlisted prefix such as cd while bash joins the line continuation into a materially different and hidden command such as a curl request, causing resolve_permission to grant ALWAYS permission while bash executes unauthorized arbitrary commands.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-436"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553","tags":[]},{"url":"https://github.com/mistralai/mistral-vibe/pull/1111","tags":[]},{"url":"https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5","tags":[]},{"url":"https://www.vulncheck.com/advisories/mistral-vibe-permission-bypass-via-bash-line-continuation","tags":[]}],"exploitRefs":[{"url":"https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553","tags":[]},{"url":"https://github.com/mistralai/mistral-vibe/pull/1111","tags":[]},{"url":"https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5","tags":[]}],"hasPoc":true,"ai":{"summary":"A permission validation bypass in Mistral Vibe allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash when handling backslash-newline line continuations. This vulnerability enables attackers to craft command strings that appear safe but actually execute hidden malicious commands.","exploitability":"Moderately difficult to exploit as it requires crafting specific command strings with backslash-newline continuations that leverage the parsing discrepancy, but can be achieved with knowledge of the affected code structure and minimal preconditions.","blast_radius":"The vulnerability could allow attackers to execute arbitrary commands on the system with the privileges of the affected service, potentially leading to full system compromise or data exfiltration across multiple systems using Mistral Vibe.","remediation":"Upgrade to version 2.25.5 or later to fix the permission validation bypass vulnerability in Mistral Vibe.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","command-injection","permission-bypass","bash"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:55:32.752Z"}}