CVE-2026-124028
mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing
CVSS
4.2
Medio
EPSS
0.2%
p9
KEV
—
Exploit Today
3
0-100
Publicado: 6 nov 2026 · Última mod.: 9 nov 2026 · CWE-140
0.2%EPSS · 30 días0.2%
2026-11-072026-11-13
mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. Attackers controlling documents, web pages or tool outputs can embed tags like </tool_call> to make qwen-xml, gemma4 or reasoning parsers return extra calls to declared tools with attacker-chosen arguments.
- github.comhttps://github.com/EricLBuehler/mistral.rs
- github.comhttps://github.com/EricLBuehler/mistral.rs/commit/b43d3443e946752c0f662c2df42a2974410c9532
- github.comhttps://github.com/EricLBuehler/mistral.rs/pull/2455
- github.comhttps://github.com/EricLBuehler/mistral.rs/releases/tag/v0.9.5
- github.comhttps://github.com/EricLBuehler/mistral.rs/security/advisories/GHSA-34w8-j94f-8c5w
- www.vulncheck.comhttps://www.vulncheck.com/advisories/mistral-rs-before-0.9.5-tool-call-injection-via-mistralrs-core-output-parsers
- github.comhttps://github.com/EricLBuehler/mistral.rs/security/advisories/GHSA-34w8-j94f-8c5w
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1147138.6 ALT23.3%
KEV—57UnrealIRCd Improper Neutralization of Delimiters Vulnerability13hCVE-2026-1040475.3 MED2.8%
——1A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.9dCVE-2026-471628.8 ALT20.1%
——6Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.57dCVE-2026-63227.5 ALT44.2%
——13fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI's authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions <= 3.1.1 are affected. Update to 3.1.2 or later.3dCVE-2026-334576.3 MED7.5%
——2Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service description value.22dCVE-2026-334567.6 ALT9.9%
——3Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.22d