{"uuid": "63c53e0d-f1fe-4c54-9501-0a2c15c39838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108759", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117422435491233997", "content": "CVE-2026-108759 mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input paths to access files with the server process's permissions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108759https://hackmd.io/@haind03/ericlbuehler-mistralrs-code-exec-output-symlink-sandbox-escapehttps://github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbada66557f6c/mistralrs-code-exec/src/files.rs#L241-L254https://github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbada66557f6c/mistralrs-code-exec/src/mount.rs#L30-L50https://github.com/EricLBuehler/mistral.rshttps://www.vulncheck.com/advisories/mistral-rs-0.9.0-through-0.9.4-sandbox-escape-via-symlink-following-in-mistralrs-code-exec#EricLBuehler #mistral.rs#CVE_2026_108759#bot", "creation_timestamp": "2026-10-11T13:09:34.884563Z"}