SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-87985

CRITICAL · CVSS 10 EPSS 0.44% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

An arbitrary code execution vulnerability in Mistral Vibe allows attackers to bypass command permission checks through improperly inspected ANSI-C quoted arguments, enabling the execution of crafted allowlisted commands. This critical flaw poses a severe risk as it can lead to unauthorized code execution on affected systems. Organizations using Mistral Vibe should prioritize immediate remediation to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-87985
Severity
CRITICAL
CVSS
10
EPSS
0.44%

Original NVD Description

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval.