Is CVE-2026-109429 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-109429 being exploited in the wild.

How severe is CVE-2026-109429?

High severity, with a CVSS score of 8.8, published 13 October 2026.

Is there a fix for CVE-2026-109429?

Yes: fixed in Mistral Vibe 2.25.4. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-109429 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-109429?

Check whether you run Mistral Vibe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-109429: Mistral Vibe command permission gate bypass in bash parsing

CVE-2026-109429 · Severity: high · CVSS 8.8 · Published 2026-10-13

Mistral Vibe is a terminal agent that validates and executes commands submitted by users. Before version 2.25.4, it contained a vulnerability where attackers could execute arbitrary commands by hiding command substitutions in specially crafted variable values that the static parser fails to detect. This allows an attacker to silently execute commands with the privileges of the terminal session running Mistral Vibe.

Technologies: Mistral Vibe. Vendors: Mistral.

Quick answers

Is CVE-2026-109429 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-109429 being exploited in the wild.
How severe is CVE-2026-109429?: High severity, with a CVSS score of 8.8, published 13 October 2026.
Which products and versions are affected?: Mistral Vibe before 2.25.4.
Is there a fix for CVE-2026-109429?: Yes: fixed in Mistral Vibe 2.25.4. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-109429 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-109429?: Check whether you run Mistral Vibe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Mistral Vibe 2.25.4

Technical details

The vulnerability exists in the command permission validation logic, which uses tree-sitter-bash for static parsing. An attacker can embed a command substitution within a single-quoted variable value and then re-expand it using the ${var@P} prompt-transform operator, causing bash's promptvars feature to execute the hidden command at runtime. The static parser only classifies the trailing allowlisted command, enabling silent arbitrary command execution.

Affected products

Mistral Vibe before 2.25.4

Timeline

2026-09-12: patched: Fixed in v2.25.4
2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.