Mistral Vibe: Trusted Folder Prompt Ignores Stray Enter Keypresses
Mistral VibeMistral Vibe 3.0.2 changed its trusted folder prompt so it ignores the Enter key for a short moment after appearing. Keys typed while Vibe is still starting up can no longer trust a folder by accident. Trusting a folder lets Vibe load project-level configuration, so the change protects the permission boundary around a repository the user has not vetted.
Key Takeaways
- Accidental trust is closed off, because keys typed during startup no longer confirm the trusted folder prompt.
- The change adds a brief input delay after the prompt appears, so the first Enter press right away is ignored.
- Trusting a folder lets Vibe use project-local configuration, so this protects a real permission boundary.
- The risk was highest when cloning an unfamiliar repository and launching Vibe immediately while still typing.
- Trust semantics are unchanged: the same prompt and the same choices, with only a timing guard added.
- The fix arrived in Mistral Vibe 3.0.2 alongside other quality-of-life changes, and needs no configuration.
A Short Delay on a Consequential Prompt
Mistral Vibe asks users to confirm whether a folder is trusted before it acts on project-local configuration, such as a local .vibe directory. That prompt is a permission boundary: answering yes tells Vibe that content inside the repository may influence how the agent behaves.
In version 3.0.2, released on 2026-10-22, Mistral Vibe changed the prompt so it ignores the Enter key for a moment after it appears. Previously, keystrokes typed while Vibe was starting could land on the prompt and confirm trust without the user ever reading the question.
Why It Matters
Anyone who launches Vibe from a shell and keeps typing, or who pastes text or presses Enter out of habit, could previously have granted trust to an unfamiliar folder. This is most likely when cloning a repository and starting the agent straight away. Trusting an untrusted project is the kind of mistake that lets a repository's own configuration shape what the agent is allowed to do.
The fix is small and does not change how trust works. Folders are still trusted or not trusted through the same prompt. The only difference is a brief window after the prompt appears in which Enter does nothing, so the decision has to be a deliberate one made after the prompt is on screen.
What Users Need to Do
Nothing needs to be configured. Users on 3.0.2 or later get the guard automatically. Someone who presses Enter instantly after the prompt appears may notice the first press has no effect and need to press it again.