Executive brief
Mistral Vibe is a minimal CLI coding agent that clones and manages git repositories. Before version 2.25.5, the tool executes git hooks such as post-checkout before validating repository trust, allowing attackers to achieve arbitrary code execution with the privileges of the user running Vibe by supplying a malicious repository.
Technical details
The vulnerability exists in the worktree creation process where git hooks (specifically post-checkout) are executed before trust validation occurs. An attacker can craft a repository containing a malicious post-checkout hook that executes arbitrary shell commands. The attack requires the user to clone or interact with the attacker-controlled repository through Mistral Vibe, and no network interaction is required beyond initial repository access.
Affected products
- Mistral Vibe before 2.25.5
Timeline
- 2026-09-19: disclosed