CVE-2026-108759: Improper Link Resolution Before File Access ('Link Following') in EricLBuehler mistral.rs

CVE-2026-108759 describes a link following vulnerability in the mistralrs-code-exec component of mistral.rs versions 0.9.0 through 0.9.4. The flaw allows sandboxed shell code to bypass sandbox restrictions by using symbolic links (symlinks) to read or overwrite files outside the sandbox environment. Attackers or agents that can inject prompts may name symlinks as outputs or reuse sessions with symlinked input paths, thereby gaining unauthorized file access with the permissions of the server process.

Exploitation of this vulnerability can lead to unauthorized reading and modification of files outside the sandbox, potentially compromising data confidentiality and integrity. The attacker gains the ability to access files with the same permissions as the server process, which may lead to further system compromise depending on those permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid running untrusted code in the affected versions or restrict the ability to create or reuse symlinked paths in sandboxed executions.