CVE-2026-109429
Description
A flaw was found in mistral-vibe. This vulnerability allows an attacker to bypass command permission security checks, leading to arbitrary command execution. By embedding command substitutions inside variables that are evaluated using Bash prompt-transform operators, malicious commands can evade static syntax analysis and run with the privileges of the agent's terminal session.
Statement
This vulnerability is rated as Important because bypassing the command authorization mechanism allows arbitrary code execution under the terminal user's privileges, creating a high impact on system integrity and confidentiality. Exploitation necessitates user interaction to process untrusted prompts or data within the agent. Additionally, Red Hat Enterprise Linux does not include mistral-vibe in default installations, substantially reducing overall exposure across enterprise environments.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Non-Repudiation
Technical Impact: Execute Unauthorized Code or Commands; DoS: Crash, Exit, or Restart; Read Files or Directories; Modify Files or Directories; Read Application Data; Modify Application Data; Hide Activities
Attackers could execute unauthorized operating system commands, which could then be used to disable the product, or read and modify data for which the attacker does not have permissions to access directly. Since the targeted application is directly executing the commands instead of the attacker, any malicious activities may appear to come from the application or the application's owner.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
