← Database

CVE-2026-122133

HIGH CVSS: 8.8 Published: 2026-11-04 Modified: 2026-11-04

Description

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.

Affected Platforms

Unknown

Weakness Type

CWE-427

References