Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-109428— Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation

Quick assessment

Affected
mistralai mistral-vibe
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Mistral Vibe 2.25.5 之前的版本中，存在一个权限验证绕过漏洞。攻击者可以通过利用 文件中的 函数在处理反斜杠换行符（backslash-newline）续行时，tree-sitter-bash 与 bash 之间的解析差异，来执行未授权的命令。 具体来说，攻击者可以构造一个命令字符串，使得 tree-sitter-bash 仅提取出允许列表中的前缀部分（例如 ），而 bash 则会通过续行机制将后续内容合并，形成一个具有实质性差异且隐藏的恶意命令（例如一条 curl 请求）。由于解析结果不一致

CVSS 8.8 · High EPSS 0.51% · P42

Affected Version Matrix 1

VendorProduct Version RangeStatus
mistralai mistral-vibe < 2.25.5 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-109428

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation
Source: CVE Program / CVE List V5
Vulnerability Description
Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.py. Attackers can craft a command string where tree-sitter-bash extracts only an allowlisted prefix such as cd while bash joins the line continuation into a materially different and hidden command such as a curl request, causing resolve_permission to grant ALWAYS permission while bash executes unauthorized arbitrary commands.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
解释冲突
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
mistralai mistral-vibe 0 ~ 2.25.5 -

II. Public POCs for CVE-2026-109428

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-109428

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-109428 (2)

Vendor Advisories for CVE-2026-109428 (1)

Vendor Pages for CVE-2026-109428 (1)

IV. Related Vulnerabilities

Same product: mistral-vibe
Same vendor: mistralai
Same weakness: CWE-436

V. Comments for CVE-2026-109428

No comments yet

Leave a comment