CVE-2026-108759
HIGH
7,6
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
6,8
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: none
Description
AI Translation Available
mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input paths to access files with the server process's permissions.
59
Improper Link Resolution Before File Access ('Link Following')
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Access Control
Other
Potential Impacts:
Read Files Or Directories
Modify Files Or Directories
Bypass Protection Mechanism
Execute Unauthorized Code Or Commands
Applicable Platforms
Operating Systems:
Windows, Unix
https://github.com/EricLBuehler/mistral.rs
https://github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbad…
https://github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbad…
https://hackmd.io/@haind03/ericlbuehler-mistralrs-code-exec-output-symlink-sand…
https://www.vulncheck.com/advisories/mistral-rs-0.9.0-through-0.9.4-sandbox-esc…