CVE-2026-87986
NONE—CVSS v3
—CVSS v2
0.56%
EPSS (exploit probability)
CWE-228CWE
Description
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval.
Affected routers (0)
No routers currently mapped to this CVE in our database.