CVE-2026-109428

Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.25.5

Description A permission validation bypass allows attackers to execute unauthorized commands. This occurs due to a parsing discrepancy between tree-sitter-bash and bash when handling backslash-newline line continuations within the extract commands() function of bash.py. An attacker can craft a command string where tree-sitter-bash identifies only an allowlisted prefix, such as cd, while bash interprets the line continuation as a different, hidden command, such as a curl request. This causes resolve permission to grant full permission, leading to the execution of arbitrary commands.

Recommendations Update Mistral Vibe to version 2.25.5 or later.