CVE-2026-122133 | Mistral AI Mistral Vibe up to 2.25.4 SessionLogger/ProjectContextProvider untrusted search path

November 4, 2026 Yanac

A vulnerability labeled as critical has been found in Mistral AI Mistral Vibe up to 2.25.4. Affected is an unknown function of the component SessionLogger/ProjectContextProvider. Such manipulation leads to untrusted search path.

This vulnerability is referenced as CVE-2026-122133. The attack can only be performed from a local environment. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More