# CVE-2026-87988: Mistral Vibe arbitrary file access via unvalidated read-only commands

Source: https://junglewise.ai/threats/cve-2026-87988-mistral-vibe-arbitrary-file-access-via-unvalidated-read-only  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-11. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-87988 · Severity: info · CVSS 10 · Published 2026-09-11

Mistral Vibe is an AI coding assistant that runs commands within a controlled workspace to prevent unauthorized file access. A vulnerability in version 2.15.0 allows attackers to bypass these workspace restrictions by using 31 read-only utility commands (grep, find, diff, sort, etc.) to read sensitive files across the entire host system—including credentials, SSH keys, and source code—without user approval. Some commands can also write files, amplifying the risk.

Technologies: [Mistral Vibe](https://junglewise.ai/threats/technologies/vibe). Vendors: [Mistral](https://junglewise.ai/threats/vendors/mistral).

## Quick answers

**Is CVE-2026-87988 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-87988 being exploited in the wild.

**How severe is CVE-2026-87988?** Informational severity, with a CVSS score of 10, published 11 September 2026.

**Which products and versions are affected?** Mistral Vibe 2.15.0 and later.

**Is there a fix for CVE-2026-87988?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-87988 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-87988?** Check whether you run Mistral Vibe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a missing path validation flaw (CWE-732) in Mistral Vibe's command allowlisting logic. Version 2.15.0 added 37 POSIX utilities to _READ_ONLY_COMMANDS_POSIX but only 6 of them (cat, head, ls, stat, tail, wc) were also added to _PATH_COMMANDS, the list subject to workspace boundary checking. The remaining 31 commands (grep, diff, du, find, sort, uniq, less, md5sum, sha1sum, sha256sum, shasum, comm, join, paste, tac, and others) bypass _collect_outside_dirs() path validation entirely, allowing them to access absolute paths outside the workspace. No authentication or user interaction is required; an attacker with command execution in Vibe can invoke these utilities with arbitrary file paths. Some commands (sort with -o, uniq with output argument, less with output option) can also write files, extending exploitation beyond information disclosure.

## Affected products

- Mistral Vibe 2.15.0 and later

## Timeline

- 2026-09-11: disclosed

## References

- [https://www.hiddenlayer.com/sai-security-advisory/2026-09-mistral-vibe6](https://www.hiddenlayer.com/sai-security-advisory/2026-09-mistral-vibe6)

## Related threats

- [Mistral Vibe remote code execution in repository configuration](https://junglewise.ai/threats/cve-2026-122135-mistral-vibe-before-3-0-3-contains-a-remote-code-execution)
- [Mistral Vibe remote code execution via malicious Git filters](https://junglewise.ai/threats/cve-2026-122134-mistral-vibe-before-2-25-7-contains-a-remote-code-execution)
- [Mistral Vibe untrusted search path code execution on Windows](https://junglewise.ai/threats/cve-2026-122133-mistral-vibe-before-2-25-5-on-windows-contains-an-untrusted)
- [Mistral Vibe remote code execution in git worktree handling](https://junglewise.ai/threats/cve-2026-116843-mistral-vibe-before-3-0-3-contains-a-remote-code-execution)
- [Mistral Vibe command permission gate bypass in bash parsing](https://junglewise.ai/threats/cve-2026-109429-mistral-vibe-before-2-25-4-contains-a-command-permission-gate)