{"data":{"id":"1e04ca69-d5e6-47a0-9bdd-1c35311ffc6f","title":"CVE-2026-87987: An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using…","summary":"CVE-2026-87987 is an arbitrary code execution vulnerability in Mistral Vibe that lets an attacker bypass command permission checks. Environment variable assignments placed before allowlisted commands are excluded from inspection, so attacker-controlled variables can trigger code execution without user approval.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87987","publishedAt":"2026-09-11T15:17:07.793Z","cveId":"CVE-2026-87987","cweIds":["CWE-15"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Mistral"],"affectedVendorsRaw":["Mistral Vibe"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mistral Vibe arbitrary code execution via environment variable assignments","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00564,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":["GHSA-r6r3-x5p3-g7m8"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T06:08:37.451Z","patchAvailable":null,"disclosureDate":"2026-09-11T15:17:07.793Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}