---
id: CVE-2026-109429
title: >-
  Mistral Vibe before 2.25.4 contains a command permission gate bypass
  vulnerability that allows attackers to execute arbitrary commands by hiding a
  command substitution inside a single-quoted variable value that
  tree-sitter-bash static pa…
summary: >-
  Mistral Vibe before 2.25.4 contains a command permission gate bypass
  vulnerability that allows attackers to execute arbitrary commands by hiding a
  command substitution inside a single-quoted variable value that
  tree-sitter-bash static pa…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-436
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T19:30:29.797'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-109429'
references:
  - url: >-
      https://github.com/mistralai/mistral-vibe/commit/19b5b74faa78d0816b8d4d4c7d7543fc3520678c
    label: disclosure@vulncheck.com
  - url: 'https://github.com/mistralai/mistral-vibe/pull/1084'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.4'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/mistral-vibe-bash-permission-bypass-via-var-p-prompt-transform
    label: disclosure@vulncheck.com
tags:
  - nvd
ingestedAt: '2026-10-13T19:43:28.931Z'
---

## Overview

Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as embedding a command substitution within a single-quoted variable and re-expanding it with the ${var@P} prompt-transform operator so bash's promptvars feature executes the hidden command at runtime while only the trailing allowlisted command is classified, resulting in silent arbitrary command execution with the privileges of the agent's terminal session.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.