CVE-2026-93993: Remote Code Execution Vulnerability in Mistral Vibe

radar.offseq.com

CVE-2026-93993: Remote Code Execution Vulnerability in Mistral Vibe

First seen 20 Sep 2026, 10:05 UTC • •57.0

Article Content

1 / 6

Browse articles

ThreatCluster •September 21, 2026 at 08:26 UTC

•CVE-2026-93993 allows remote code execution in Mistral Vibe prior to version 2.25.5.
•Attackers can exploit the vulnerability via crafted git hooks in untrusted repositories.
•Users are urged to upgrade to version 2.25.5 or later to mitigate the risk.

A remote code execution vulnerability, CVE-2026-93993, has been identified in Mistral Vibe versions prior to 2.25.5. This flaw allows attackers to execute arbitrary shell commands by supplying a malicious repository with a crafted post-checkout hook before trust validation occurs. The vulnerability affects users running Mistral Vibe, potentially leading to full system compromise depending on user privileges. There is currently no evidence of public proof-of-concept or exploitation in the wild. Users are advised to upgrade to version 2.25.5 or later to mitigate the risk. Until a patch can be applied, it is recommended to avoid cloning or creating worktrees from untrusted repositories. The CVSS score for this vulnerability is 8.6, indicating a high severity level.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 5h ago How this analysis works

Timeline

2026-09-19

CVE-2026-93993 published

CVE-2026-93993 was published detailing a remote code execution vulnerability in Mistral Vibe.

2026-09-20

Vulnerability confirmed in Mistral Vibe

Mistral Vibe versions before 2.25.5 confirmed to be vulnerable to remote code execution.

radar.offseq.com

2026-09-20

Mitigation recommendations issued

Users advised to upgrade to version 2.25.5 or later to mitigate the vulnerability.

exploit-intel.com

More articles in this cluster (5)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Zero-day Exploit
T1059 - Command and Scripting Interpreter

Vulnerability (1)

CVE-2026-93993

Weakness (1)

CWE-78 - OS Command Injection

Tool (1)

Git

Relationships

Git exploits CVE-2026-93993
CVE-2026-93993 related to Zero-day Exploit
CVE-2026-93993 related to CWE-78 - OS Command Injection
CVE-2026-93993 related to T1059 - Command and Scripting Interpreter

Following this threat?

Track CVE-2026-93993 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…