{"data":{"id":"2b2a7504-6efe-4204-b36a-e3746d6a8690","title":"CVE-2026-87983: An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass…","summary":"An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, lets an attacker bypass workspace restrictions with quoted absolute paths in allowlisted shell commands. Improper handling of quotation marks during path validation allows files outside the active workspace to be read without user approval.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87983","publishedAt":"2026-09-11T15:17:07.240Z","cveId":"CVE-2026-87983","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Mistral"],"affectedVendorsRaw":["Mistral Vibe"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mistral Vibe arbitrary file read via quoted absolute paths in shell commands","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00623,"epssCheckedAt":"2026-11-04T00:12:27.710Z","kevDateAdded":null,"advisoryAliases":["GHSA-wcxh-p9m4-jq8r"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T12:08:08.804Z","patchAvailable":null,"disclosureDate":"2026-09-11T15:17:07.240Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}