CVE-2026-87988:詳細資料

CVE-2026-87988

2026-09-11
15h17 +00:00
2026-09-11
17h35 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-732 Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

參考資料