View Ridge Security
Back to Cyber Hose

CVE-2026-93993: Mistral Vibe RCE via git post-checkout (CVSS 8.6)

Mistral Vibe RCE via git post-checkout headlines this run, with Argo Workflows cross-namespace disclosure and two Exim Proxy-Protocol vulnerabilities.

🔓 CVEs & KEV

  • CVE-2026-93993 — mistralai mistral-vibe — CVSS 8.6 — Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkoutMistral...

  • CVE-2026-93991 — argoproj argo-workflows — CVSS 8.3 — Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Sel...

  • CVE-2026-94056 — Exim — CVSS 7.5 — Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled ...

  • CVE-2026-94054 — Exim — CVSS 7.0 — Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled ...

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check