CVE-2026-108759 EricLBuehler CVE debrief

Who should care

Defenders responsible for systems using mistral.rs versions 0.9.0 through 0.9.4 should assess their exposure and prioritize patching or mitigation. This includes reviewing system inventories, checking for exposure, and implementing compensating controls where necessary.

Why it matters

CVE-2026-108759 is a high-severity vulnerability in mistral.rs that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Defenders should prioritize verifying versions, applying patches, and implementing compensating controls to prevent potential unauthorized file access and modification.

• Potential unauthorized file access and modification
• Possible escalation of privileges
• Need for verification of mistral.rs versions and exposure
• Potential for data breaches or integrity loss

Technical summary

The vulnerability in mistral.rs versions 0.9.0 through 0.9.4 allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. This is due to a link following vulnerability in mistralrs-code-exec. Attackers or prompt-injected agents can exploit this by naming symlinks as outputs or reusing sessions with symlinked input paths to access files with the server process's permissions.

Defensive priority

Defenders should prioritize verifying the versions of mistral.rs in use and applying patches or mitigations as available. This involves reviewing system inventories, checking for exposure, and implementing compensating controls where necessary.

Recommended defensive actions

• Verify the versions of mistral.rs in use and check for exposure
• Apply patches or mitigations as available
• Review system inventories and implement compensating controls where necessary
• Monitor for suspicious activity and implement exception tracking
• Perform vulnerability scanning to identify exposed systems
• Implement asset inventory management to track affected components
• Review and update incident response plans to address potential breaches

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, affected versions, and references to technical descriptions and advisories. However, the corpus does not provide explicit information on exploitation or victim impact.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.