CVE-2026-87986

The record

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval.

Affected packages

Related vulnerabilities

• CVE-2025-59174 Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability… CWE-228
• CVE-2026-25657 Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of… CWE-228
• CVE-2026-42100 Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows… CWE-228
• CVE-2026-34232 Firebird is an open-source relational database management system. CWE-228
• CVE-2026-20125 A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE… CWE-228