Threats tagged 'ghsa-3fw5-5q64-5hwx'

Mistral Vibe versions before 2.25.7 have a remote code execution vulnerability. This flaw allows attackers to execute arbitrary commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens such a crafted repository, the application runs git status at startup, triggering the malicious filters and executing commands with the user's privileges before any trust prompt appears.