The vulnerability allows an attacker to construct a command string that exploits a parsing difference between tree‑sitter‑bash and the standard bash interpreter. The parser accepts an allowed prefix such as "cd" and grants permission, while bash joins a backslash‑newline continuation into a hidden, more destructive command such as a curl request. This mismatch causes the service to believe a safe action is authorized, yet arbitrary commands are executed, effectively bypassing permission checks.

Products affected are Mistralai Mistral Vibe releases older than version 2.25.5. Any instance of Mistral Vibe running a tree‑sitter‑bash based command extraction routine before the 2.25.5 release falls within the scope of this issue.

The CVSS score of 8.7 classifies the flaw as high severity. Exploit probability is not reflected in an EPSS value, and the vulnerability is not listed in the CISA KEV catalog, but the lack of an EPSS entry does not imply low risk; it only indicates that data is unavailable. Attackers who can supply input to the command extraction routine can immediately gain arbitrarily privileged command execution, making this a critical local or remote code execution risk depending on the existing access model.