GHSA-wx9m-wx4f-4cmg: Malicious dropper in mistralai 2.4.6 PyPI package

Summary

The mistralai PyPI package version 2.4.6 contains a malicious dropper that runs on import on Linux. The code was added to src/mistralai/client/__init__.py and was not produced by the project's normal release pipeline, which uses PyPI Trusted Publishing. Versions 2.4.5 and earlier are not known to be affected.

Mitigation

Pin mistralai to 2.4.5 or earlier. While the PyPI project is quarantined, install from this repository at a known-good tag, e.g. git+https://github.com/mistralai/client-python.git@v2.4.5. On affected Linux hosts, rotate every credential reachable from the importing process and

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• mistralaiPyPILLM dependency since 2023-12-09 · 23 tracked dependents

Related items

• MediumCVE-2026-67989: crmne/ruby_llm polynomial-time regex denial of service in Mistral model matchingSame vendor · NVD/CVE Database
• HighCVE-2026-93993: Mistral Vibe remote code execution through git hooks in worktree creationSame vendor · NVD/CVE Database
• HighCVE-2026-87988: Mistral Vibe arbitrary file access by bypassing workspace restrictionsSame vendor · NVD/CVE Database
• HighCVE-2026-87987: Mistral Vibe arbitrary code execution via environment variable assignmentsSame vendor · NVD/CVE Database
• HighCVE-2026-87986: Mistral Vibe arbitrary code execution by bypassing command permission checksSame vendor · NVD/CVE Database