CVE-2026-124028

Name of the Vulnerable Software and Affected Versions mistral.rs versions prior to 0.9.5

Description A delimiter injection issue exists in the mistralrs-core component. Attackers who control documents, web pages, or tool outputs can inject delimiter strings, such as the </tool call> tag, into text that the model quotes. This allows the attacker to force qwen-xml, gemma4, or reasoning parsers to generate additional calls to declared tools using arguments chosen by the attacker.

Recommendations Update mistral.rs to version 0.9.5 or later.