CVE-2026-93993: Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes

Mistral Vibe before version 2.25.5 has a remote code execution vulnerability (RCE, where an attacker can run commands on a system they don't own) in its worktree creation process. The vulnerability occurs because git hooks (scripts that run automatically during git operations) are executed before the system checks whether the repository is trusted, allowing attackers to run malicious commands with the same user privileges as Vibe.