M
Mistral
Security Risk Profile
77
/100
highSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 11, 2025 to present
9
Total CVEs
8
Critical+High
2
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
9.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
77/100
high
⚠️ 2 Active Exploits🆕 1Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
4High
4Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
Most Affected Products
1. Beproduct Beproduct\/nestjs-auth Node.js17
2. Multiagentcognition Cmux-agent-mcp Node.js6
3. Abhishake1 Supersurkhet\/cli Node.js6
4. Abhishake1 Supersurkhet\/sdk Node.js6
5. Abhishake1 Taskflow-corp\/cli Node.js6
Recent Vulnerabilities
See more →CVE-2026-116843
CVSS 8.7high
Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode
Oct 27, 2026🔧 No Patch
CVE-2026-109429
CVSS 8.7high
Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform
Oct 13, 2026🔧 No Patch
CVE-2026-109428
CVSS 8.7high
Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation
Oct 13, 2026🔧 No Patch
CVE-2026-87985
CVSS 10.0critical
Sep 11, 2026🔧 No Patch
CVE-2026-87984
CVSS 9.3critical
Sep 11, 2026🔧 No Patch
CVE-2026-87983
CVSS 9.2critical
Sep 11, 2026🔧 No Patch
CVE-2026-67623
CVSS 8.6high
Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook
Aug 5, 2026🔧 No Patch
CVE-2026-45321
CVSS 9.6critical
TanStack Unspecified Vulnerability
May 12, 2026⚠ Exploited
https://www.theregister.com/2025/11/11/llm_sidechannel_attack_microsoft_researcher/
unknown
LLM side-channel attack could allow snoops to guess topic
Nov 11, 2025⚠ Exploited🔧 No Patch
Monitor Mistral in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.