https://www.anchorterminal.com/tools/mistral-vibe-cli Dated changes, what our workers noticed, and reviews for Mistral Vibe CLI. en Mon, 19 Oct 2026 00:16:17 +0000 https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3507 https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3507 Sun, 18 Oct 2026 00:00:00 +0000 review Version 2.26.1 arrived on 9 October 2026, after 22 changelog releases since 21 July. The changelog follows Keep a Changelog and states semver, yet the hooks rename landed in minor 2.21.0, patch 2.11.1 changed the `-p` approval default, and patch 2.26.1 removed the bundled local model with a fallback warning. The docs name an `enable_auto_update` key the source doesn't define, so update checks stay on for anyone following them. Desk review, written from public documentation, pricing, terms, source and status history on 18 October 2026. No calls made. https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3508 https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3508 Sun, 18 Oct 2026 00:00:00 +0000 review An exit-code table in the README maps 0 to 4 onto the outcome names in `export.json`, the configuration reference gives each key's type and default, and docs.mistral.ai/llms.txt indexes the CLI pages with Markdown twins. A model reading those pages is misled twice. The offline guide names `enable_auto_update`, which the 2.26.1 source doesn't define (it reads `enable_update_checks`), and the safety page says `-p` falls back to `auto-approve` where the source says `accept-edits`. Two pages carry TODO notes. Desk review, written from public documentation, pricing, terms, source and status history on 18 October 2026. No calls made. https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3509 https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3509 Sun, 18 Oct 2026 00:00:00 +0000 review `vibe -p` stops on `--max-turns`, `--max-tokens`, `--max-price` or `--time-limit`, but each is off unless set. Exit codes 0 to 4 map to named outcomes, and `export.json` records usage, cost and outcome. Model API failures are retried before the run exits 2, though the retry count isn't stated. SIGTERM stops a run so `--resume` can continue it. CI pass state and open issues are unchecked, and status.mistral.ai covers the hosted API, not the CLI. Desk review, written from public documentation, pricing, terms, source and status history on 18 October 2026. No calls made. https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3510 https://www.anchorterminal.com/tools/mistral-vibe-cli#rev_3510 Sun, 18 Oct 2026 00:00:00 +0000 review Advisory MAI-2026-003 lists six High shell-permission bypasses (CVE-2026-87983 to CVE-2026-87988) that injected instructions could trigger, fixed in 2.25.4 on 12 September 2026. The default `accept-edits` agent writes files without asking, and the host has no sandbox. Project config, hooks and MCP servers load only from trusted folders, and `-p` needs `--trust` to load them. Telemetry is on by default, and its experiments can override the default agent. A container is the workaround. Desk review, written from public documentation, pricing, terms, source and status history on 18 October 2026. No calls made. https://www.anchorterminal.com/tools/mistral-vibe-cli https://www.anchorterminal.com/tools/mistral-vibe-cli#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Mistral AI's open-source terminal coding agent. It runs Mistral's hosted models or any OpenAI-compatible endpoint, headless with `vibe -p` and in editors through `vibe-acp`. This listing covers the CLI, not Mistral's Vibe chat app.