HighVulnerabilityLLM-specific
CVE-2026-109429: Mistral Vibe command permission gate bypass via hidden command substitution
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-109429
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
CVE-2026-109429 affects Mistral Vibe before 2.25.4 and contains a bypass of its command permission gate. Tree-sitter-bash static parsing misses a command substitution hidden inside a single-quoted variable value, which the attacker re-expands with the ${var@P} prompt-transform operator so bash's promptvars feature runs it at runtime. Only the trailing allowlisted command is classified, so arbitrary commands run silently with the privileges of the agent's terminal session.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-109428: Mistral Vibe permission bypass via backslash-newline command parsingSame vendor · NVD/CVE Database
- MediumCVE-2026-67989: crmne/ruby_llm polynomial-time regex denial of service in Mistral model matchingSame vendor · NVD/CVE Database
- HighCVE-2026-93993: Mistral Vibe remote code execution through git hooks in worktree creationSame vendor · NVD/CVE Database
- HighCVE-2026-87988: Mistral Vibe arbitrary file access by bypassing workspace restrictionsSame vendor · NVD/CVE Database
- HighCVE-2026-87987: Mistral Vibe arbitrary code execution via environment variable assignmentsSame vendor · NVD/CVE Database