# CVE-2026-93993: Mistral Vibe remote code execution in worktree creation

Source: https://junglewise.ai/threats/cve-2026-93993-mistral-vibe-before-2-25-5-contains-a-remote-code-execution  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-19. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-93993 · Severity: high · CVSS 8.8 · Published 2026-09-19

Mistral Vibe is a minimal CLI coding agent that clones and manages git repositories. Before version 2.25.5, the tool executes git hooks such as post-checkout before validating repository trust, allowing attackers to achieve arbitrary code execution with the privileges of the user running Vibe by supplying a malicious repository.

Technologies: [Mistral Vibe](https://junglewise.ai/threats/technologies/vibe). Vendors: [Mistral](https://junglewise.ai/threats/vendors/mistral).

## Quick answers

**Is CVE-2026-93993 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-93993 being exploited in the wild.

**How severe is CVE-2026-93993?** High severity, with a CVSS score of 8.8, published 19 September 2026.

**Which products and versions are affected?** Mistral Vibe before 2.25.5.

**Is there a fix for CVE-2026-93993?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-93993 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-93993?** Check whether you run Mistral Vibe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the worktree creation process where git hooks (specifically post-checkout) are executed before trust validation occurs. An attacker can craft a repository containing a malicious post-checkout hook that executes arbitrary shell commands. The attack requires the user to clone or interact with the attacker-controlled repository through Mistral Vibe, and no network interaction is required beyond initial repository access.

## Affected products

- Mistral Vibe before 2.25.5

## Timeline

- 2026-09-19: disclosed

## References

- [https://github.com/mistralai/mistral-vibe](https://github.com/mistralai/mistral-vibe)
- [https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py](https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py)

## Related threats

- [Mistral Vibe remote code execution in repository configuration](https://junglewise.ai/threats/cve-2026-122135-mistral-vibe-before-3-0-3-contains-a-remote-code-execution)
- [Mistral Vibe remote code execution via malicious Git filters](https://junglewise.ai/threats/cve-2026-122134-mistral-vibe-before-2-25-7-contains-a-remote-code-execution)
- [Mistral Vibe untrusted search path code execution on Windows](https://junglewise.ai/threats/cve-2026-122133-mistral-vibe-before-2-25-5-on-windows-contains-an-untrusted)
- [Mistral Vibe remote code execution in git worktree handling](https://junglewise.ai/threats/cve-2026-116843-mistral-vibe-before-3-0-3-contains-a-remote-code-execution)
- [Mistral Vibe command permission gate bypass in bash parsing](https://junglewise.ai/threats/cve-2026-109429-mistral-vibe-before-2-25-4-contains-a-command-permission-gate)