{"data":{"id":"4606e986-7e40-4b78-8324-853a8bd54b80","title":"CVE-2026-67623: Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary com","summary":"Mistral Vibe versions before 2.23.3 have an RCE (remote code execution, where attackers can run commands on a victim's computer) vulnerability that lets attackers execute arbitrary commands by hiding malicious code in a repository's .git/config file. When a user runs vibe commands in a crafted repository, the malicious code is triggered through git hooks (automated scripts that git runs at certain points), giving attackers full control over what runs on the victim's system.","solution":"Update Mistral Vibe to version 2.23.3 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-67623","publishedAt":"2026-08-05T14:17:10.047Z","cveId":"CVE-2026-67623","cweIds":["CWE-829"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Mistral"],"affectedVendorsRaw":["Mistral Vibe"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-05T14:17:10.047Z","capecIds":["CAPEC-437"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}