CVE-2026-116843: Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Mistral Vibeto a version that resolves this vulnerability.Fixed in 3.0.3
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Mistral Vibe versions before 3.0.3 are exposed when they are started with the --worktree option and process an untrusted repository. The issue depends on Git worktree creation applying repository-controlled attributes and filter-driver settings.
What does an attacker need to do to exploit it?
An attacker needs to provide an untrusted repository containing Git filter-driver configuration in .git/config and corresponding .gitattributes rules. When the repository is handled in worktree mode, Git can invoke smudge, clean, or process commands before Mistral Vibe's trusted-folder check.
What is the impact if exploitation succeeds?
The attacker-controlled Git filter command runs with the privileges of the user running Mistral Vibe. This can result in remote command execution with high confidentiality, integrity, and availability impact.
What can be done if upgrading is not immediately possible?
Do not start affected versions with --worktree on repositories that are not trusted. Avoid processing repositories supplied by untrusted users until upgrading to version 3.0.3 or later.