{"data":{"id":"ff0edf80-ffc2-4d87-9dac-2372b02fb9eb","title":"CVE-2026-87986: An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using…","summary":"CVE-2026-87986 is an arbitrary code execution vulnerability in Mistral Vibe. Attackers can bypass its command permission checks by using shell constructs the parser cannot interpret. Because the unparsed portions are omitted from inspection, embedded commands run on the user's system without approval.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87986","publishedAt":"2026-09-11T15:17:07.653Z","cveId":"CVE-2026-87986","cweIds":["CWE-228"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Mistral"],"affectedVendorsRaw":["Mistral Vibe"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mistral Vibe arbitrary code execution by bypassing command permission checks","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00564,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-m93j-546h-jwjv"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T12:08:07.613Z","patchAvailable":null,"disclosureDate":"2026-09-11T15:17:07.653Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}