{"data":{"id":"8d59c601-b722-4b6e-a2d9-91b9cbd9a1d8","title":"CVE-2026-116843: Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by…","summary":"CVE-2026-116843 affects Mistral Vibe before 3.0.3. Attacker-defined git filter drivers in an untrusted repository's .git/config are executed when Vibe is started with --worktree, because git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check. The result is execution of attacker commands with user privileges.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-116843","publishedAt":"2026-10-27T01:19:07.730Z","cveId":"CVE-2026-116843","cweIds":["CWE-829"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Mistral"],"affectedVendorsRaw":["Mistral Vibe"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mistral Vibe remote code execution via git filter drivers","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-27T06:10:23.208Z","kevDateAdded":null,"advisoryAliases":["GHSA-xwx6-2mm7-g8wj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-27T06:10:26.970Z","patchAvailable":null,"disclosureDate":"2026-10-27T01:19:07.730Z","capecIds":["CAPEC-437"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}