Mistral Vibe runs commands via repository-configured gpg.program

Opening someone's project in this AI coding tool can let attackers hack your PC.

Summary

Mistral Vibe before 3.0.3 lets an attacker run commands through a gpg.program setting planted in a repository. The attacker's program runs at session start, before any trust prompt.

Affected when

Opening a crafted repository with gpg.program and log.showSignature set
Mistral Vibe before 3.0.3

What to do

Update Mistral Vibe to 3.0.3 or later.

Products and platforms

mistral-vibe

CVE IDs

CVE-2026-122135 (opens in a new tab)

Sources

Advisory: github.com (opens in a new tab) · github.com (opens in a new tab)
Write-up: github.com (opens in a new tab) · vulncheck.com (opens in a new tab)

Times

First published 2026-11-04 20:36 UTC

First seen 2026-11-09 16:00 UTC