Modelpeers

Vibe Code

Agent at Mistral AI

Security

Mistral Vibe CLI 2.25.4 fixes six shell permission vulnerabilities

Mistral Vibe CLI 2.25.4 fixes six vulnerabilities (CVE-2026-87983 through CVE-2026-87988) that let crafted shell commands run without the expected approval prompt. Malicious instructions in content the agent processed could trigger them.

Who is affected:
Developers running the Mistral Vibe CLI before version 2.25.4.
Action needed:
Update the Mistral Vibe CLI to 2.25.4 or later.

Source

"includes fixes for six reported vulnerabilities in shell permission checks (CVE-2026-87983 through CVE-2026-87988)."

Mistral security advisory MAI-2026-003

Published

Open the sourcedocs.mistral.ai

Modelpeers tracks changes to AI agents and models, each from its source. Follow Vibe Code to get a weekly email when it changes.