CVE-2026-87988EPSS p35.0%

CVE-2026-87988CVE-2026-87988

Description

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval.

Scoring

EPSS0.43% probability of exploitation · percentile 35.0% · 2026-10-05T12:00:23Z
Last modified2026-09-11
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.