CVE-2026-109429: Interpretation Conflict in mistralai mistral-vibe
Description
Mistral Vibe versions before 2.25.4 have a command permission gate bypass vulnerability that enables attackers to execute arbitrary commands. This occurs due to a flaw in static parsing by tree-sitter-bash, which fails to detect command substitutions hidden inside single-quoted variable values. Attackers can exploit this by embedding a command substitution within a single-quoted variable and then re-expanding it with the ${var@P} prompt-transform operator, causing bash's promptvars feature to execute the hidden command at runtime. This results in silent arbitrary command execution with the privileges of the agent's terminal session.
CVSS v4.0
Score 8.7high
Affected software
mistralai
mistral-vibe
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-109429 describes a command permission gate bypass vulnerability in mistral-vibe before version 2.25.4. The vulnerability arises because the tree-sitter-bash static parser does not detect command substitutions embedded inside single-quoted variable values. Attackers can craft input that embeds a command substitution within a single-quoted variable and then re-expand it using the ${var@P} prompt-transform operator. This causes bash's promptvars feature to execute the hidden command at runtime, while only the trailing allowlisted command is recognized by the parser. This bypass allows silent arbitrary command execution with the privileges of the terminal session running the agent.
Potential Impact
An attacker can achieve silent arbitrary command execution within the context of the agent's terminal session privileges. This bypasses command permission gates intended to restrict command execution, potentially leading to unauthorized actions on the affected system. The vulnerability has a high severity score (CVSS 8.7), indicating significant risk if exploited.
Mitigation Recommendations
A fix is available in mistral-vibe version 2.25.4. Users should upgrade to version 2.25.4 or later to remediate this vulnerability. No additional mitigation steps are indicated in the provided data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-12T15:52:36.682Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ace79b72cdf04f656972471
Added to database: 10/13/2026, 18:34:31 UTC
Last enriched: 10/13/2026, 18:50:31 UTC
Last updated: 10/13/2026, 18:57:33 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.