CVE-2026-122133 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
Mistral Vibe, an AI coding tool, runs a git.exe placed in a repository root on Windows, before any trust prompt appears. Opening a crafted repository lets an attacker execute code on the user's machine.
first public Nov 4, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Windows users of Mistral Vibe before version 2.25.5 who open untrusted repositories. The sources do not describe other platforms. Teams that only use Mistral Vibe on macOS or Linux, or who never open repositories from outside, are less exposed.
Not affected if non-windows, trusted-repos-only
Who cares coding-agent, mistral-vibe, windows
2.25.5 are affected on Windows.git.exe file in repository roots you open with Mistral Vibe.2.25.5 or later.Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.