Mistral Vibe Shell Permission Bypass Leading to Arbitrary Code Execution | Hacker News - But Better

Mistral Vibe Shell Permission Bypass Leading to Arbitrary Code Execution blog.secmate.dev

Analysis of Mistral Vibe permission bypasses related to CVE-2026-87987 and CVE-2026-87984, covering arbitrary code execution and workspace escape.

1 points•enitmar•7 days ago•1 comment•

#code #vibe #execution #mistral #arbitrary #permission #mistral vibe #arbitrary code

1 comment

maxrb7 days ago

Hi, one of the researchers here. Happy to answer questions about how we tested this.

PoC repository: https://github.com/SecMateDev/mistral-vibe-attack-demo

Read the full thread on Hacker News →

Related stories

Lobsters Interview with Susam
Lobsters · 86 points · about 1 year ago
Emacs Arbitrary Code Execution Returnseshelyaron.com
Lobsters · 5 points · about 1 month ago
Show HN: Caspian – Desktop app to build and launch small vibe-coded projectscaspian.md
Hacker News · 1 points · 3 days ago
Arbitrary code execution vulnerability fixed in Emacs 25.3lists.gnu.org
Lobsters · 12 points · about 9 years ago
Show HN: Critic – Review code with the agent that wrote itcritic.run
Hacker News · 8 points · 7 days ago
Remote Code Execution (RCE) in a DoD Websitehackerone.com
Hacker News · 1 points · 9 days ago