CVE-2026-67623
Received Received - Intake

Remote Code Execution in Mistral Vibe

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: VulnCheck

Description
Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is triggered when vibe invokes git status --porcelain without suppressing hook execution. Attackers can distribute or create a crafted repository containing a malicious fsmonitor entry to achieve arbitrary command execution with the victim's full privileges when any vibe command is run inside that repository.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-67623
EUVD
EUVD-2026-53342

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mistral vibe to 2.23.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-829 The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Mistral Vibe before 2.23.3 has a remote code execution flaw. Attackers can embed a malicious core.fsmonitor hook in a repository's .git/config file. When Vibe runs 'git status --porcelain' without blocking hooks, the malicious code executes with the victim's privileges.

Detection Guidance

Check for suspicious .git/config files in repositories using Mistral Vibe. Look for core.fsmonitor hooks that may execute arbitrary commands. Commands like 'find / -name .git -type d -exec grep -l "fsmonitor" {} \;' may help identify affected repositories.

Impact Analysis

If you use Mistral Vibe before 2.23.3, an attacker could trick you into cloning a malicious repository. Running any Vibe command in that repo would execute arbitrary commands on your system with your user privileges.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially violating data protection requirements under GDPR or HIPAA by enabling access to sensitive data or systems. Organizations must patch to maintain compliance.

Mitigation Strategies

Upgrade Mistral Vibe to version 2.23.3 or later. Disable or remove any untrusted .git/config files with fsmonitor hooks. Avoid running vibe commands in untrusted repositories.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-67623. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart