{"id":"CVE-2026-122133","kind":"vulnerability","aliases":["CVE-2026-122133"],"related":[],"title":"Mistral Vibe on Windows runs attacker git.exe from opened repository","description":"Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.","summary":"Mistral Vibe, an AI coding tool, runs a git.exe placed in a repository root on Windows, before any trust prompt appears. Opening a crafted repository lets an attacker execute code on the user's machine.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","coding-agent","mistral-vibe","windows"],"not_affected_if":["non-windows","trusted-repos-only"],"how_to_check":"- Check the installed Mistral Vibe version; versions before `2.25.5` are affected on Windows.\n- Look for a `git.exe` file in repository roots you open with Mistral Vibe.","fix":"- Mistral Vibe on Windows: upgrade to `2.25.5` or later.","status":"open","published_at":"2026-11-04T21:18:09+00:00","first_seen_at":"2026-11-04T21:49:19+00:00","triaged_at":"2026-11-04T21:50:35+00:00","updated_at":"2026-11-04T21:50:35+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-11-04T21:50:35Z","model":"claude-haiku-5-5","output":{"fix":"- Mistral Vibe on Windows: upgrade to `2.25.5` or later.","reach":"local","title":"Mistral Vibe on Windows runs attacker git.exe from opened repository","impact":"high","summary":"Mistral Vibe, an AI coding tool, runs a git.exe placed in a repository root on Windows, before any trust prompt appears. Opening a crafted repository lets an attacker execute code on the user's machine.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["mistral-vibe","windows","coding-agent"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Attacker code runs as the user when a crafted repository is opened","analyst_note":"Confirm the affected version range and whether the fixed release note at the linked GitHub release covers all Windows builds.","how_to_check":"- Check the installed Mistral Vibe version; versions before `2.25.5` are affected on Windows.\n- Look for a `git.exe` file in repository roots you open with Mistral Vibe.","plain_action":"","needs_analyst":true,"not_affected_if":["non-windows","trusted-repos-only"],"who_is_affected":"Windows users of Mistral Vibe before version 2.25.5 who open untrusted repositories. The sources do not describe other platforms. Teams that only use Mistral Vibe on macOS or Linux, or who never open repositories from outside, are less exposed.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.00069,"input_tokens":4188,"output_tokens":543,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-122133':13A,16A '-2026':12A,15A '2.25.5':65C 'agent':22B 'ai':18B,30B 'ai-tool':17B 'allow':75C 'appear':47B 'attack':6A,54B,76C,87C 'code':21B,31B,56B,79C 'coding-ag':20B 'contain':68C 'craft':50B,94C 'cve':11A,14A 'execut':55B,78C 'git.exe':7A,35B,82C,103C 'let':52B 'lure':89C 'machin':61B 'malici':102C 'mistral':1A,24B,27B,62C 'mistral-vib':23B 'open':9A,48B,92C 'path':72C 'place':36B,81C 'projectcontextprovid':99C 'prompt':46B,110C 'repositori':10A,39B,51B,85C,95C 'root':40B,86C 'run':5A,33B,100C 'search':71C 'session':105C 'sessionlogg':97C 'start':106C 'tool':19B,32B 'trust':45B,109C 'untrust':70C 'user':59B,90C 'vibe':2A,25B,28B,63C 'vulner':73C 'window':4A,26B,42B,67C","nicknames":[],"mitigations":[],"who_affected":"Windows users of Mistral Vibe before version 2.25.5 who open untrusted repositories. The sources do not describe other platforms. Teams that only use Mistral Vibe on macOS or Linux, or who never open repositories from outside, are less exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aitooling","codingagent","high","mistralvibe","windows"],"campaign_type":null,"first_public_at":"2026-11-04T21:18:09+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122133","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122133","severity":null,"published_at":"2026-11-04T21:18:09+00:00","modified_at":"2026-11-04T21:18:09+00:00","first_seen_at":"2026-11-04T21:49:19+00:00","fetched_at":"2026-11-04T21:49:19+00:00","note":null}],"documents":[{"id":70658,"url":"https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":70659,"url":"https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":70660,"url":"https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-on-windows-untrusted-search-path-rce-via-git-exe","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}