CVE-2026-87986: An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using s

Mistral Vibe contains a vulnerability where an attacker can run unauthorized commands on a user's system by using shell constructs (special characters or syntax that the command parser doesn't understand) that the parser cannot interpret. Because unparsed portions are skipped during permission checks, embedded commands can execute without approval.