CVE-2026-108940
MediumCVSS 6.5Summary
A vulnerability in EricLBuehler Mistral.rs up to 0.9.3 affects the function calibration_apply in mistralrs-server-core/src/handlers.rs. Manipulation of the argument save_cimatrix results in path traversal. The attack can be initiated remotely. The exploit is public. Upgrading to 0.9.4 fixes the issue.
Risk Assessment
A remote attacker could access files outside the allowed directory, potentially leading to data leakage or further attacks.
Recommendation
Upgrade immediately to version 0.9.4.
Other vulnerabilities in Mistral.rs
See all- CVE-2026-108939Medium
A vulnerability in EricLBuehler mistral.rs up to 0.9.3 affects the function is_global_ip in mistralrs-server-core/src/media_source.rs. Manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit is public. Upgrading to 0.9.4 is recommended.
- CVE-2026-108759Medium
mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input paths to access files with the server process's permissions.
- CVE-2026-75090Medium
A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22, affecting the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs in the GGUF Tokenizer component. Manipulation of the arguments eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely and the exploit is now public. Upgrading to version 0.8.23 can resolve this issue.
Original NVD description (English source)
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument save_cimatrix results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 0.9.4 is sufficient to fix this issue. The patch is named 8c81056712709b4845ec6d9531e4d35bab4a367c. It is suggested to upgrade the affected component.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS