Command Permission Gate Bypass in Mistral Vibe by Mistral AI

CVE-2026-109429

What is CVE-2026-109429?

Mistral Vibe prior to version 2.25.4 is susceptible to a command permission gate bypass vulnerability. This issue allows attackers to execute arbitrary commands by embedding command substitutions within single-quoted variable values, which are undetected by the static parsing of tree-sitter-bash. By utilizing the ${var@P} prompt-transform operator, malicious actors can manipulate the bash promptvars feature to execute concealed commands at runtime with the same privileges as the executing terminal session, leading to potential unauthorized access and execution of commands.

References