MediumVulnerabilityLLM-specific
CVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted text
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-124028
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
mistral.rs before 0.9.5 contains a delimiter injection flaw in mistralrs-core that lets attackers inject tool calls. An attacker who controls documents, web pages or tool outputs can embed tags such as </tool_call> so that the qwen-xml, gemma4 or reasoning parsers return extra calls to declared tools with attacker-chosen arguments.
Mitigation
Fixed in 0.9.5.
Related items
- MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
- MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
- MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
- CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database