EricLBuehler has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 6.5 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-108940Medium· 6.5A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.348CVE-2026-108759Medium· 6.8mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks37CVE-2026-108939Medium· 5.3A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.329
EricLBuehler vulnerabilities
CVEs affecting EricLBuehler, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-108940Medium· 6.5PoCA vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument save_cimatrix results i…
CVE-2026-108939Medium· 5.3A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3
A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery…
CVE-2026-108759Medium· 6.8mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks
mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name sym…