Workspace Permission Bypass via Shell Redirection

Mistral Vibe versions 1.3.4 through 2.25.3 omit shell redirection targets from workspace permission checks. A command classified as safe can therefore read or write files outside the authorized workspace without the expected approval prompt, subject to the Vibe process's operating-system permissions and runtime controls. Repository-based exploitation requires Vibe to process attacker-controlled content and the model to emit a crafted shell tool call. SecMate independently reported this behavior to Mistral on September 5, 2026, before HiddenLayer published the overlapping CVE advisory on September 11. Version 2.25.4 fixes the issue.