Monday, October 5, 2026 · 3 of 4Mistral Vibe CLI permission-bypass CVEs (CVE-2026-87987/87984) enable code execution via malicious repos; fixed in 2.25.8+Sep 23–24SecurityAgentsRead the full briefing · 6 stories