{"data":{"id":"14e536ac-976e-44fb-ac65-482b2ee5f619","title":"CVE-2026-87988: An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through…","summary":"An arbitrary file access vulnerability in Mistral Vibe lets an attacker bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands allows access to files outside the active workspace without user approval.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87988","publishedAt":"2026-09-11T15:17:07.930Z","cveId":"CVE-2026-87988","cweIds":["CWE-732"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Mistral"],"affectedVendorsRaw":["Mistral Vibe"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mistral Vibe arbitrary file access by bypassing workspace restrictions","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0043,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-2pcm-jhmp-6w2f"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T06:08:37.030Z","patchAvailable":null,"disclosureDate":"2026-09-11T15:17:07.930Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-1"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}