PT-2026-95877 · Unknown · Mistral-Vibe
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Mistral Vibe versions prior to 2.25.5
Description
A remote code execution issue exists in the worktree creation process that executes git hooks before trust validation. An attacker can provide a repository containing a crafted post-checkout hook to execute arbitrary shell commands with the privileges of the user running the application.
Recommendations
Update to version 2.25.5 or later.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mistral-Vibe