Mistral Vibe Shell Permission Bypass Leading to Arbitrary Code Execution
Two Mistral Vibe permission bypasses could execute arbitrary code or access files outside the workspace when repository content led the model to issue …
SecMate Blog.
What we find. What we share.
Latest.
Which Vulnerabilities Do AI Coding Agents Still Produce?
Coding agents may handle familiar defences such as parameterised queries better than security requirements that depend on context. C/C++ studies do …
CVE-2026-43603: Local Denial of Service in AMD's Linux GPU Driver
SecMate automatically discovered CVE-2026-43603 in AMD’s Linux GPU driver. A NULL-pointer dereference can cause a kernel crash and local denial …
Five Bosch Sensortec SensorAPI and COINES SDK Vulnerabilities
SecMate found five memory-safety vulnerabilities in Bosch Sensortec’s BHI360, BHI385 and BME690 Sensor APIs and the COINES sensor evaluation …
From USB to ESP: CPG-Guided Local Analysis
How SecMate reduces repository-scale analysis to source-backed CPG evidence slices, applied to three disclosed vulnerabilities in Espressif USB host …
Corrupting the Secure World: Three Memory-Safety Flaws in OP-TEE
SecMate’s automated analysis discovered three memory-safety issues in OP-TEE, an open-source Trusted OS for Arm TrustZone commonly deployed with …
Vulnerabilities in NASA CryptoLib
SecMate reported vulnerabilities in NASA CryptoLib. This post covers the six public GitHub Security Advisories affecting the KMC crypto service client …
CVE-2026-20753: Integer Overflow in Slim Bootloader's ext2 Reader
SecMate researchers discovered CVE-2026-20753 in Intel Slim Bootloader: a crafted ext2 superblock could make the bootloader under-allocate its group …
Four Vulnerabilities in Tuya's Arduino TuyaOpen Framework
SecMate found four vulnerabilities in Tuya’s arduino-tuyaopen framework: a DNS heap overflow, an out-of-bounds read in DP handling, a heap …
Memory Safety Vulnerabilities in Renesas FSP Cryptographic and Networking Code
SecMate found seven vulnerabilities in Renesas FSP for RA microcontrollers. The most relevant cases affect RSA verification, AES-XTS finalization, GCM …