Description

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "8.8",
  "pubDate": "2026-09-19T23:17:10.673Z",
  "pubdate": "2026-09-19T23:17:10.673Z",
  "executiveSummary": "Mistral Vibe versions prior to 2.25.5 are susceptible to a Remote Code Execution (RCE) vulnerability stemming from improper validation during the worktree creation process.\nThe vulnerability allows an unauthenticated attacker to achieve arbitrary code execution by supplying a malicious repository containing a crafted post-checkout git hook.\nThe core of the issue resides in the premature execution of git hooks before the application performs trust validation or security sanitization on the repository contents.\nSuccessful exploitation results in the execution of arbitrary shell commands with the full privileges of the user running the Mistral Vibe application, potentially leading to a total system compromise.\nThis vulnerability is critical due to the ease of delivery via malicious repositories, requiring no prior authentication or specialized credentials to initiate the attack flow.",
  "technicalDetails": "The vulnerability is located within the Mistral Vibe worktree creation component, which is responsible for initializing and managing git repositories as part of its operational workflow.\nRoot cause analysis indicates that the application logic fails to adhere to a secure-by-default execution policy. Specifically, the process triggers the execution of git hooks—specifically the post-checkout hook—prior to establishing a trust boundary or sanitizing the repository's configuration files.\nAttack flow begins when an attacker provides a crafted repository to the Mistral Vibe instance. The repository contains a malicious .git/hooks/post-checkout script designed to execute arbitrary shell commands. When the Vibe application initiates the worktree creation or cloning process, the underlying git system automatically executes the post-checkout hook as part of its standard lifecycle management.\nBecause the application executes these hooks before any validation or 'trust' assessment occurs, the shell commands embedded in the hook are executed with the security context and privileges of the Vibe user. This bypasses any intended application-level security constraints.\nThis RCE vector does not require interaction from the user beyond the initiation of the repository import or worktree setup. Consequently, the attacker can gain persistent access, facilitate lateral movement, or exfiltrate sensitive data from the host machine.\nThe vulnerability affects all versions of Mistral Vibe prior to 2.25.5. The exploitation does not require authentication to the application, as the entry point is the processing of external or untrusted repository structures, which is a core function of the product."
}