Threat database

CVE-2026-108940 is a path traversal vulnerability in EricLBuehler Mistral.rs affecting versions 0.9.0 through 0.9.3. The flaw exists in the calibration_apply function within mistralrs-server-core/src/handlers.rs, where manipulation of the save_cimatrix argument allows remote attackers to perform path traversal. This vulnerability has a CVSS 4.0 score of 6.9 (medium severity). The issue is fixed in version 0.9.4.

CVE-2026-108939 is a server-side request forgery (SSRF) vulnerability in EricLBuehler mistral.rs versions 0.9.0 through 0.9.3. The flaw exists in the is_global_ip function within the mistralrs-server-core/src/media_source.rs file, where manipulation of the ip argument can lead to SSRF. This vulnerability can be exploited remotely. A patch fixing this issue is available in version 0.9.4.

mistral.rs versions 0.9.0 through 0.9.4 contain a vulnerability in the mistralrs-code-exec component where improper link resolution before file access allows sandboxed shell code to read and overwrite files outside the sandbox via symbolic links. This can be exploited by attackers or prompt-injected agents who can manipulate symlinked input or output paths to access files with the server process's permissions.

CVE-2026-75090 is a medium severity vulnerability in EricLBuehler Mistral.rs up to version 0.8.22. It involves an out-of-bounds read in the convert_gguf_to_hf_tokenizer function within the GGUF Tokenizer component. The issue arises from manipulation of the eos_token_id, bos_token_id, or unknown_token_id arguments. This vulnerability can be exploited remotely and public exploit code is available. Upgrading to version 0.8.23 resolves the issue.