Is CVE-2026-116843 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116843?

CVE-2026-116843 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-116843

Description

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.