PT-2026-137156
CVE-2026-122134
·
Published
2026-11-04
·
Updated
2026-11-04
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens a crafted repository, ProjectContextProvider. fetch git status runs git status at startup, invoking the filters and executing commands with user privileges before any trust prompt.
Found an issue in the description? Have something to add? Feel free to write us 👾