Mistral Vibe before 3.0.3 has a remote code execution flaw that lets attackers run arbitrary shell commands via malicious git filter drivers defined in the .git/config file of an untrusted repository. When the application is launched with the --worktree option, git worktree add processes the repository’s .gitattributes and executes filter smudge, clean, or process commands before confirming that the directory is safe, allowing attacker‑controlled commands to run under the user’s privileges.

Mistralai’s Mistral Vibe product is affected in all releases prior to version 3.0.3. Users of these earlier versions should check their installed version and upgrade if necessary.

The vulnerability carries a CVSS score of 8.7, indicating a high severity level, and is not currently listed in CISA’s KEV database. The EPSS score is not available, so the exploitation probability is unknown. Attackers can exploit the flaw by creating or modifying a repository that the application will pull and by defining malicious filter drivers in its .git/config; the likely attack vector is local or controlled by the user’s ability to provide the repository.