CVE-2026-87985: An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using A
Summary
Mistral Vibe contains a vulnerability where attackers can bypass security checks that normally prevent unauthorized commands from running by using ANSI-C quoted arguments (a special text formatting method). This allows someone to modify an approved command so it secretly runs malicious code on a user's computer without permission.
Vulnerability Details
EPSS: 0.0%
September 11, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-87985
First tracked: September 11, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 85%