CVE-2026-67623

Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.23.3

Description A remote code execution issue exists where attackers can execute arbitrary commands by embedding a malicious core.fsmonitor hook within a repository's .git/config file. This is triggered when the software invokes the git status --porcelain command without suppressing hook execution. An attacker can distribute a crafted repository containing this malicious entry to execute commands with the victim's full privileges whenever any command is run inside that repository.

Recommendations Update Mistral Vibe to version 2.23.3 or later.