CyberRota Analysis
AI-GeneratedAn arbitrary file read vulnerability in Mistral Vibe, starting from version 2.6.0, allows attackers to exploit improper path validation by using quoted absolute paths in allowlisted shell commands, thereby bypassing workspace restrictions. This critical flaw can lead to unauthorized access to sensitive files outside the active workspace without user consent. Organizations using Mistral Vibe should prioritize patching this vulnerability to mitigate the risk of data exposure.
Original NVD Description
An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands. Improper handling of quotation marks during path validation enables files outside the active workspace to be read without user approval.