Skip to content
Submit incident
AII-1001-55323
ReportedReported by fewer than three independent publishers, with no official finding.

Mistral Vibe CLI automatically executes Python tools without user approval

Mistral Vibe CLI reportedly automatically executes all Python tools in a workspace without requiring user approval or consent when users open the workspace, creating a potential security risk.

12 December 2025 · Mistral · Security and cyberattacks
12 December 2025

Drafted by Raidu Incident Detection, an automated system.

AII-1001-55323View source ↗
Quick facts
Category
Security and cyberattacks
Source
mindgard.ai
Date
12 December 2025
Drafted by
Raidu Incident Detection

What happened

All Python tools defined in the current workspace (./.vibe/tools/*.py) are automatically executed upon start of the Mistral Vibe CLI assistant.

No auto-approval mechanism or user approval process is enabled; code executes automatically when users open the workspace through Vibe.

Classification

Category
Security and cyberattacks
Harm status
Potential harm
Intent
Unintentional
Timing
Post-deployment
Failure modes
Unsafe autonomous behaviour
Consequences
None recorded
AI systems
Mistral Vibe CLI

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

mindgard.ai
Mindgard Disclosure