CVE-2026-87983

Mistral Vibe, starting with version 2.6.0, contains an arbitrary file read flaw (CWE-22) in how it validates paths in allowlisted shell commands. When a quoted absolute path is used, the workspace-restriction check mishandles the quotation marks, so the command is treated as workspace-safe and runs without the user-approval prompt. An attacker who can influence the shell commands the agent executes can thereby read any file accessible to the agent outside the active workspace, such as configuration or credential files, with no user interaction. All users running Mistral Vibe 2.6.0 or later are affected, and the issue carries a critical severity rating (CVSS 4.0: 9.2). No public proof of concept or in-the-wild exploitation is currently known, and the flaw is not listed in CISA's KEV catalog.

What to do: Upgrade Mistral Vibe past 2.6.0 as soon as a patched release is available, since no fixed version is stated in the available data; monitor the vendor advisory for the fix. As interim mitigation, review and tighten the shell-command allowlist so quoted absolute paths are not auto-approved, or run the agent in a container or sandbox that restricts filesystem reads to the workspace. Check whether version 2.6.0 or later has processed untrusted content that could have driven non-workspace file reads.