CRITICAL 10.0 NVD
CVE-2026-87986
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot inter
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval.
References
This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-09-11 via NVD.
Risk Timeline
CVE Disclosed2026-09-11 · -1 days ago
Remediation Resources
Official Advisory
www.hiddenlayer.com/sai-security-advisory/2026-09-mistral-vibe4
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.