Is CVE-2026-122133 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-122133?

CVE-2026-122133 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-122133

Description

Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute code by placing git.exe in a repository root. Attackers can lure users into opening a crafted repository so SessionLogger and ProjectContextProvider run the malicious git.exe at session start before any trust prompt.