CyberRota Analysis
AI-GeneratedMistral Vibe is vulnerable to an arbitrary code execution flaw that allows attackers to bypass command permission checks through manipulated environment variable assignments. This oversight enables the execution of arbitrary code without user consent, posing a critical risk to system integrity. Organizations using Mistral Vibe should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause arbitrary code execution without user approval.