Mistral Vibe 2.25.4 Fixes Shell Approval Bypasses
Mistral's advisory documents shell approval bypass fixes; teams should verify their installed version and expected prompts.
Edited by Tyronne Panaino
Mistral's September 14 security advisory describes shell approval bypasses addressed in Mistral Vibe 2.25.4, released on September 12. The company says affected behavior could let specially crafted shell commands run without the expected approval prompt.
For developers using Vibe, the practical issue is whether an action receives the review they expected before it runs. The release notes say shell permission checks now require approval for risky syntax and command options that could bypass workspace and denylist controls.
What the shell permission fix changes
The advisory and release notes document a correction to the approval boundary. Treat that correction as a reason to review the installed version and the permission mode used in your own workflow. Neither record, by itself, establishes what happened during a particular developer's earlier session.
Keep the questions separate: which version is installed, what actions were authorized, and what evidence exists about commands that actually ran? A patch announcement cannot answer the last question for an individual machine.
Check the workflow before resuming work
As a practical rollout check, record the installed version, confirm the intended approval settings, and use an ordinary authorized task to inspect the resulting prompts. Agree on the expected behavior before treating that trial as a successful validation.
If reviewing a possible incident, preserve the available session records and compare observed commands with the work that was authorized. Document what the records establish and what they leave unresolved. An unexpected action deserves investigation; the announcement alone should not be treated as proof of an intrusion.
The next verifiable checkpoint is a documented version and approval-behavior check in the team's own environment. This coverage has not independently reproduced the vulnerabilities or tested the patch.
Status
Confirmed vendor advisory and release; medium internal confidence. Both sources belong to Mistral, so they provide an official account without independent operational corroboration.
Sources
Update note: Last reviewed September 16, 2026. Further official corrections or independent testing may refine this coverage.
Sources
- Mistral — Vibe shell permission advisory — official
- Mistral — Vibe 2.25.4 release notes — official
Drafted with AI assistance from source briefs; reviewed for citation completeness and label accuracy.