CVE-2026-87988
An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path v…
Published: 2026-09-11 · CVSS: 10.0 · CVSS 4.0
An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7