CVE-2026-122133 – Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

​CVE ID :CVE-2026-122133

Published : Nov. 4, 2026, 8:36 p.m. | 45 minutes ago

Description :Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More