{"data":{"id":"76f03f0e-2bb1-47b9-875c-17eadf9cdb0d","title":"CVE-2026-87984: An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or…","summary":"An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, lets an attacker create or overwrite files outside the active workspace without user approval. Shell redirection destinations are left out of permission checks, so otherwise allowlisted commands can write to any path the Vibe process can access.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87984","publishedAt":"2026-09-11T15:17:07.383Z","cveId":"CVE-2026-87984","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Mistral"],"affectedVendorsRaw":["Mistral Vibe"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mistral Vibe arbitrary file write through shell redirection","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00496,"epssCheckedAt":"2026-11-04T12:08:33.171Z","kevDateAdded":null,"advisoryAliases":["GHSA-4vx3-rfqx-v945"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T12:08:08.398Z","patchAvailable":null,"disclosureDate":"2026-09-11T15:17:07.383Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}