# CVE-2026-109429: Mistral Vibe command permission gate bypass in bash parsing

Source: https://junglewise.ai/threats/cve-2026-109429-mistral-vibe-before-2-25-4-contains-a-command-permission-gate  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-109429 · Severity: high · CVSS 8.8 · Published 2026-10-13

Mistral Vibe is a terminal agent that validates and executes commands submitted by users. Before version 2.25.4, it contained a vulnerability where attackers could execute arbitrary commands by hiding command substitutions in specially crafted variable values that the static parser fails to detect. This allows an attacker to silently execute commands with the privileges of the terminal session running Mistral Vibe.

Technologies: [Mistral Vibe](https://junglewise.ai/threats/technologies/vibe). Vendors: [Mistral](https://junglewise.ai/threats/vendors/mistral).

## Quick answers

**Is CVE-2026-109429 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-109429 being exploited in the wild.

**How severe is CVE-2026-109429?** High severity, with a CVSS score of 8.8, published 13 October 2026.

**Which products and versions are affected?** Mistral Vibe before 2.25.4.

**Is there a fix for CVE-2026-109429?** Yes: fixed in Mistral Vibe 2.25.4. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-109429 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-109429?** Check whether you run Mistral Vibe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Mistral Vibe 2.25.4

## Technical details

The vulnerability exists in the command permission validation logic, which uses tree-sitter-bash for static parsing. An attacker can embed a command substitution within a single-quoted variable value and then re-expand it using the ${var@P} prompt-transform operator, causing bash's promptvars feature to execute the hidden command at runtime. The static parser only classifies the trailing allowlisted command, enabling silent arbitrary command execution.

## Affected products

- Mistral Vibe before 2.25.4

## Timeline

- 2026-09-12: patched: Fixed in v2.25.4
- 2026-10-13: disclosed

## References

- [https://github.com/mistralai/mistral-vibe/commit/19b5b74faa78d0816b8d4d4c7d7543fc3520678c](https://github.com/mistralai/mistral-vibe/commit/19b5b74faa78d0816b8d4d4c7d7543fc3520678c)
- [https://github.com/mistralai/mistral-vibe/pull/1084](https://github.com/mistralai/mistral-vibe/pull/1084)

## Related threats

- [Mistral Vibe remote code execution in repository configuration](https://junglewise.ai/threats/cve-2026-122135-mistral-vibe-before-3-0-3-contains-a-remote-code-execution)
- [Mistral Vibe remote code execution via malicious Git filters](https://junglewise.ai/threats/cve-2026-122134-mistral-vibe-before-2-25-7-contains-a-remote-code-execution)
- [Mistral Vibe untrusted search path code execution on Windows](https://junglewise.ai/threats/cve-2026-122133-mistral-vibe-before-2-25-5-on-windows-contains-an-untrusted)
- [Mistral Vibe remote code execution in git worktree handling](https://junglewise.ai/threats/cve-2026-116843-mistral-vibe-before-3-0-3-contains-a-remote-code-execution)
- [Mistral Vibe remote code execution in worktree creation](https://junglewise.ai/threats/cve-2026-93993-mistral-vibe-before-2-25-5-contains-a-remote-code-execution)