M
Vendor security profile
mistralai
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical6
CISA KEV0
Public exploit1
Patch rate%40
Avg. CVSS9.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
7
2
CVE KEV
CVE severity distribution
10toplam CVE
Critical6 (60%)
High4 (40%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%10
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
8.7
CVE-2026-109429
Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform
M
Patch verifiedEPSS %1
8.7
CVE-2026-109428
Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation
M
Patch verifiedEPSS %1
8.6
CVE-2026-93993
Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout
M
Patch verifiedEPSS %1
10.0
CVE-2026-87988
Incorrect permission assignment in Mistralai Mistral Vibe
M
Patch status unknownEPSS %0
10.0
CVE-2026-87987
Vulnerability in Mistralai Mistral Vibe
M
Patch status unknownEPSS %1
10.0
CVE-2026-87986
Vulnerability in Mistralai Mistral Vibe
M
Patch status unknownEPSS %1
10.0
CVE-2026-87985
Vulnerability in Mistralai Mistral Vibe
M
Patch status unknownEPSS %1
9.3
CVE-2026-87984
Path traversal in Mistralai Mistral Vibe
M
Patch status unknownEPSS %0
9.2
CVE-2026-87983
Path traversal in Mistralai Mistral Vibe
M
Patch status unknownEPSS %1
8.6
CVE-2026-67623
Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook
M
Patch verifiedEPSS %1