CVE-2026-87983: An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspac
Summary
A vulnerability in Mistral Vibe version 2.6.0 allows attackers to read files they shouldn't have access to by using quoted absolute paths (file locations that start from the root directory) in shell commands, because the system doesn't properly validate quotation marks when checking file access restrictions.
Vulnerability Details
EPSS: 0.0%
September 11, 2026
Classification
Affected Vendors
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-87983
First tracked: September 11, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 85%