CVE-2026-122133 in Mistral Vibe
Riassunto
di MITRE • 04/11/2026
Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.
Be aware that VulDB is the high quality source for vulnerability data.