CVE-2026-108759
mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec
EricLBuehler mistral.rs
CVSS
7.6HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.32%Chance of exploitation activity in the next 30 days, higher than 23% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input paths to access files with the server process's permissions.
Text from CVE List
Affected versions 1
- mistral.rsaffected: 0.9.0 through 0.9.4CVE List
References 5
- hackmd.io/@haind03/ericlbuehler-mistralrs-code-exec-output-symlink-sandbox-escapeAdvisoryvia CVE List
- vulncheck.com/advisories/mistral-rs-0.9.0-through-0.9.4-sandbox-escape-via-symlink-following-in-mistralrs-code-execAdvisoryvia CVE List
- github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbada66557f6c/mistralrs-code-exec/src/files.rs#L241-L254Referencevia CVE List
- github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbada66557f6c/mistralrs-code-exec/src/mount.rs#L30-L50Referencevia CVE List
- github.com/EricLBuehler/mistral.rsReferencevia CVE List