AI Threat AlertMistralai
AI Threat Alert tracks 11 known AI/ML vulnerabilities affecting Mistralai products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Mistralai CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| HIGH | CVE-2026-67623 | Mistral Vibe: RCE via malicious git fsmonitor hook | mistral-vibe | 8.8 |
| CRITICAL | CVE-2026-87983 | Mistral Vibe: quoted paths bypass file read guard | mistral-vibe | - |
| CRITICAL | CVE-2026-87984 | Mistral Vibe: shell redirection bypasses file-write guardrails | mistral-vibe | - |
| CRITICAL | CVE-2026-87986 | Mistral Vibe: shell parser bypass enables unapproved RCE | mistral-vibe | - |
| CRITICAL | CVE-2026-87985 | Mistral Vibe: ANSI-C quote bypass enables RCE | mistral-vibe | - |
| CRITICAL | CVE-2026-87987 | Mistral Vibe: env-var trick bypasses command allowlist | mistral-vibe | - |
| CRITICAL | CVE-2026-87988 | Mistral Vibe: unvalidated paths let agent escape workspace | mistral-vibe | - |
| HIGH | CVE-2026-93993 | Mistral Vibe: RCE via git hooks run before trust check | mistral-vibe | 8.8 |
| HIGH | CVE-2026-109429 | Mistral Vibe: bash gate bypass allows silent RCE | mistral-vibe | 8.8 |
| HIGH | CVE-2026-109428 | Mistral Vibe: bash parsing bypass allows hidden commands | mistral-vibe | 8.8 |
| HIGH | CVE-2026-116843 | Mistral Vibe: RCE via git filter drivers in worktree | mistral-vibe | 8.8 |
Frequently asked questions
How many known vulnerabilities affect Mistralai?
11 AI/ML CVEs affecting Mistralai products are tracked, sourced from NVD and GitHub Advisory.
What Mistralai products are affected?
The CVEs below map to the Mistralai AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the Mistralai vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor Mistralai for new vulnerabilities?
AI Threat Alert tracks Mistralai continuously; a Pro subscription adds breaking alerts when new CVEs affecting Mistralai are published.
How do I assess Mistralai's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Mistralai issues first and judge the exposure for your stack.