Mistral AI

Key Terms

• Vibe / Vibe for code - Mistral's agent for long-horizon work and its coding surface (terminal, IDE, background remote agents in isolated sandboxes). Source: Mistral AI – Code
• API credits - Monthly usage allowance bundled with consumer plans: $10/mo on Free, $30/mo on Pro, $15/mo on Education. Rollover terms are undisclosed. Source: Mistral AI – Pricing
• PAYG (pay-as-you-go) credits - Beyond plan limits, you pay only for what you use at API rates. Source: Mistral AI – Pricing
• Regional inference (Regional Endpoints) - Generally available choice of EU or US inference endpoints for supported models, with in-region data processing, priced at +10% over list. Source: Mistral AI – Api , Mistral AI – Regional Inference Open Models New Compute
• Priority Tier - New inference service tier in public preview: committed service levels for mission-critical workloads, custom rate limits, and an uptime SLA. Pricing undisclosed. Source: Mistral AI – Regional Inference Open Models New Compute , Mistral AI – Api
• Cached input tokens - Repeated prompt prefixes billed at a 90% discount on input tokens (e.g., GLM 5.3: $0.14 vs $1.40 per MTok). Source: Mistral AI – Api , Mistral AI – Zai Glm 5 3
• Batch - Async high-volume processing at half price. Source: Mistral AI – Api
• Third-party open models - Open-weight models from other labs (starting with Z.ai's GLM 5.2 on Aug 11, GLM 5.3 on Sep 15) hosted by Mistral "without Mistral modifications" on the same infrastructure and regional controls. Source: Mistral AI – Regional Inference Open Models New Compute , Mistral AI – Zai Glm 5 3
• European Compute Units (ECUs) - Mechanism converting multi-year enterprise compute commitments into access to Mistral-built European infrastructure; anchor participants include Amadeus, ASML, Capgemini, Caisse des Dépôts, and CMA CGM, with plans for up to 1 GW of capacity by 2030. Source: Mistral AI – Regional Inference Open Models New Compute
• Teleport - Moves a live Vibe CLI session between local terminal and a cloud remote agent, keeping history, task state, and approvals. Source: Mistral AI – Pricing
• Hooks - Custom shell commands run before and after each Vibe agent turn, to enforce conventions or block patterns. Source: Mistral AI – Pricing

Latest Changes

Changes since the 2026-08 report.

• Funding: €3B Series D at more than €21B post-money (Sep 8). Led by Samsung Electronics with co-leads Scaleup Europe Fund (EQT) and PSG Equity; new investors Advent, BlackRock funds, and the Grand Duchy of Luxembourg; described as the largest equity round ever completed by a European tech company. Mistral says it operates across 20 countries with 125+ global enterprises. Source: Mistral AI – Mistral Makes Sovereign Open Weight Ai To Frontier
• New hosted model: Z.ai GLM 5.3 (Sep 15). Third-party open-weight coding model, 1M context, 128K max output, $1.40/$4.40 per MTok, $0.14 cached input, served without Mistral modifications. Source: Mistral AI – Zai Glm 5 3
• Deprecation: GLM 5.2 deprecated Sep 29, retires Oct 31. The model that anchored the August third-party launch lasted about seven weeks as flagship; GLM 5.3 is the stated replacement at identical pricing ($1.40/$4.40). Source: Mistral AI – Overview
• Security: five Vibe CLI CVEs fixed in 2.25.4 (Sep 12). Shell permission bypasses (CVE-2026-87984 through -87988, some affecting versions back to 1.3.4) enabled arbitrary code execution and token exfiltration from hostile repository content; reported by SecMate Sep 5, advisory MAI-2026-003 published Sep 14, additional hardening shipped in 2.25.5/2.25.7/2.25.8. Sources: Secmate – Mistral Vibe Cve 2026 87987 Cve 2026 87984 , Mistral AI – Mai 2026 003
• Billing mechanics now quantified on the API page. Regional inference +10%, cached input tokens -90%, Batch -50%, and Enterprise APIs (regional controls, system-level SLAs, higher rate limits) at 75% above list pricing on select APIs. Source: Mistral AI – Api
• Plans now bundle API credits. Free $10/mo, Pro $30/mo, Education $15/mo in API credits; not recorded in the August baseline, so the effective date is undisclosed. Source: Mistral AI – Pricing
• Deprecations: Leanstral 1.5 and OCR 4.0 retired Sep 30. Both were deprecated Sep 29, roughly three months after their June launches; OCR 4.1 ($4/1,000 pages OCR, $5/1,000 pages Document AI) is the replacement, and no Leanstral successor is named. Source: Mistral AI – Overview
• No new first-party coding models. Mistral Medium 3.5 remains v26.04 (April 28) and Codestral remains v25.08 (July 2025); the August warning that the model gap versus GLM/Qwen open weights would become structural without a September Codestral refresh has now materialized. Sources: Mistral AI – Overview , Mistral AI – Mistral Medium 3 5 26 04
• Partnerships: Cloudera (Sep 10) and Mozilla (Sep 16). Cloudera brings Mistral models to hybrid and fully air-gapped enterprise deployments across 30 exabytes of customer-managed data; Mozilla's Firefox Smart Window (beta) is powered by Mistral models in France and North America with zero data retention, UK and Germany to follow. Sources: Mistral AI – Mistral X Cloudera , Mistral AI – Mistral X Mozilla
• Safety models listed: Shieldstral 1.0 and Mistral Moderation 2. Shieldstral 1.0 (Apache 2.0, compact multimodal moderation, launched Aug 4) appears in the docs catalog; Mistral Moderation 2 (128K context, jailbreak detection) is now free on the pricing page. Sources: Mistral AI – Overview , Mistral AI – Api

Plans

Source: Mistral AI – Pricing

Feature Comparison (from Pricing Page)

Terms explained:

• Flash answers - Quick, short responses; 150/day on Pro vs 200/day on Team, per the pricing FAQ. Source: Mistral AI – Pricing
• Remote agent observability - Run history, tool calls, code changes, logs, and audit trails for remote coding sessions. Source: Mistral AI – Pricing
• PAYG credits - Continue past plan limits at API rates. Source: Mistral AI – Pricing

API Pricing

Service tiers: Standard; Batch (-50%); Priority (committed service levels, custom rate limits, uptime SLA; price undisclosed). Configurable add-ons: regional inference (EU or US endpoints) at +10%; cached input tokens at -90%. Enterprise APIs (regional data processing controls, system-level SLAs, increased rate limits, premium support) are available at 75% above list pricing on select APIs. Source: Mistral AI – Api

Coding-Relevant Models

Sources: Mistral AI – Api , Mistral AI – Zai Glm 5 3 , Mistral AI – Mistral Medium 3 5 26 04

Other Models

Specialist Models

Tool / API Pricing

Source: Mistral AI – Api

Model Performance / Benchmarks

Mistral published no new coding benchmarks in September, and the Medium 3.5 model card itself displays no benchmark table (only context, pricing, and feature lists). The only first-party published coding scores remain those from the May 22 launch post, re-verified this cycle:

Mistral claims Medium 3.5 scores "ahead of Devstral 2 and models like Qwen3.5 397B A17B" on SWE-Bench Verified, with no independent verification. Source: Mistral AI – Vibe Remote Agents Mistral Medium 3 5

Hosted GLM 5.3 documentation lists no benchmark scores either (speed/performance are unlabeled sliders). Source: Mistral AI – Zai Glm 5 3

Community counterpoint: an HN commenter running business benchmarks reported "Mistral Medium 3.5 with reasoning is worse than Gemma 4 31B and Glimmer 30B. It's a 128B dense model that's priced accordingly!", which is unverified but consistent with the pattern that Mistral's last published coding benchmark is five months old. News – Item

Note: OpenAI stopped using SWE-Bench Verified due to contamination concerns; cross-provider comparisons on that benchmark should be treated with caution.

Latest News

Z.ai GLM 5.2 lands in Vibe Code (September 2, 2026)

The @mistralvibe account announced GLM 5.2 is available inside Vibe Code, extending the August 11 third-party hosting program (which started with GLM 5.2 on the API) into the coding agent itself. Sources: News – Item , Mistral AI – Regional Inference Open Models New Compute

Mistral raises €3B Series D (September 8, 2026)

€3 billion at more than €21 billion post-money, led by Samsung Electronics, co-led by Scaleup Europe Fund (EQT) and PSG Equity, with Advent, BlackRock-managed funds, and the Grand Duchy of Luxembourg as new investors; Mistral calls it the largest equity fundraising round ever completed by a European technology company. The company states it operates across 20 countries and supports 125+ global enterprises including Airbus, ASML, and HSBC, and frames the round as scaling frontier research, compute capacity, and international commercial growth. Source: Mistral AI – Mistral Makes Sovereign Open Weight Ai To Frontier

Legacy Fortran modernization case study (September 9, 2026)

Applied AI post documenting a European energy operator's migration of 40,000 of 300,000 lines of Fortran 77 to C++ (a physics-intensive reservoir simulator): a numerical parity harness built before migration, over a hundred Vibe CLI agents documenting the codebase using document libraries and Mistral OCR, and a structured planner/coder/tester/reviewer workflow with human review gates beating both full autonomy and manual sessions. Source: Mistral AI – Legacy Code Modernization

Cloudera partnership (September 10, 2026)

Mistral models integrated with Cloudera's hybrid data platform for deployment across private/public cloud, on-prem, and fully air-gapped environments, plus custom model training against proprietary data; Cloudera cites 30 exabytes of customer-managed data on its platform. Source: Mistral AI – Mistral X Cloudera

Vibe CLI shell permission CVEs disclosed and fixed (September 5-14, 2026)

SecMate reported two report clusters (SECMATE-2026-0038/0039) on Sep 5; HiddenLayer published related advisories Sep 11; Mistral shipped the fail-closed fix in Vibe 2.25.4 on Sep 12 and advisory MAI-2026-003 on Sep 14, with additional hardening in 2.25.5, 2.25.7, and 2.25.8 (recommended minimum version). The bugs let hostile repository content turn allowlisted commands like cat README.md into arbitrary code execution via dropped environment assignments (e.g., PATH=./bin:$PATH), with a PoC exfiltrating the victim's Mistral token. Sources: Secmate – Mistral Vibe Cve 2026 87987 Cve 2026 87984 , Mistral AI – Mai 2026 003

Z.ai GLM 5.3 hosted on the platform (September 15, 2026)

Third-party open-weight coding model with 1M context and 128K max output at $1.40/$4.40 per MTok ($0.14 cached input), served without Mistral modifications; announced via @mistralvibe as "GLM 5.3 Hosted by Mistral" around Sep 21. GLM 5.2 was deprecated Sep 29 (retires Oct 31) in favor of it, at identical pricing. Sources: Mistral AI – Zai Glm 5 3 , News – Item , Mistral AI – Overview

Mozilla Firefox Smart Window partnership (September 16, 2026)

Firefox Smart Window (beta), Mozilla's AI browsing assistant, is now powered by Mistral models for users in France and North America, with the UK and Germany expected later in 2026; conversations are not saved on Mozilla servers by default and Mistral agrees to zero data retention. Source: Mistral AI – Mistral X Mozilla

Mensch's "AI is software" interview and 'negligence' remarks (September 24-29, 2026)

In a Le Monde interview, Arthur Mensch argued "AI is software. It can be controlled," positioning Mistral against US labs' safety framing; follow-up coverage (CNBC, Sep 29) reported his claim that the US AI safety debate masks competitors' 'negligence'. HN threads: News – Item (99 points, 169 comments) , News – Item (51 points)

Munich hub and month-end deprecations (September 28-30, 2026)

Mistral opened a German hub in Munich to advance industrial AI in Europe's largest economy (Sep 28). On Sep 29 the docs deprecation table was updated: GLM 5.2 (retire Oct 31), Leanstral 1.5 (retired Sep 30, no successor named), and OCR 4.0 (retired Sep 30, replaced by OCR 4.1). Sources: Mistral AI – News , Mistral AI – Overview

Community Signals

€3B raise thread: sovereignty endorsed, models roasted (850 points, 603 comments)

September's biggest Mistral discussion on HackerNews was the fundraise. The top substantive comments split between backing the sovereignty strategy and attacking the model quality and pricing.

• nik736: "I really do hope they can catch up with the American models... In our business benchmarks their Mistral Medium 3.5 with reasoning is worse than Gemma 4 31B and Glimmer 30B. It's a 128B dense model that's priced accordingly! Mistral Small 4 is way worse than Gemma 4 26B A4B... Their API pricing is just insane for what you get." News – Item
• davedx: "Mistral is an interesting AI company because they clearly have a contrarian business strategy to the other AI labs... People dump on them because they're not benchmaxxxing which is pretty shortsighted - do you really want to be in a benchmark arms race with China, or do you want to make money and deploy sovereign AI compute in Europe?" News – Item
• rldjbpin (work access to the platform): "the 'best' model, or the one i've used the most so far is GLM-5.2! for all the promise, i would temper my expectations for a frontier model for coding or general purpose. but for niche use cases (document parsing, voice*, etc.) and as a platform to handle finetuned versions... i can see the value of partnering with them. if the core model could be any open-weights solution out there, the moat dissolves really quickly." News – Item
• sbinnee: "I am still waiting for their large model... There is no 3.5 small nor large not to mention no 4 medium nor 4 large. These model numbers to me seem like that their model release did not meet the schedule. I am still waiting for 4 large and expect it to match at least glm 5.2 performance." News – Item
• AidenVennis: "Mistral should not focus on competing with Claude Fable or OpenAI's Astra at first but have a good EU alternative to Opus or even Sonnet. The fact that it's European will be enough to be used by a lot of companies and governments in the EU." News – Item

Thread: News – Item

Le Monde interview thread: "AI is software" gets pushback (99 points, 169 comments)

Mensch's controllability argument drew technical rebuttals.

• Aransentin: "'X is made of ' is a fully general counterargument for why anything whatsoever is controllable. A human is just a few chemical reactions... it's enough to have an open model run its own weights and make money from scamming elderly people or the like, and it'll keep running as long as anyone anywhere is willing to make money by renting hardware to it." News – Item
• tpoacher: "Depends on your definition of 'controlled'... Boeing's MCAS system was also 'just software'... But then people died precisely because pilots found themselves unable to override or 'control' the systems precisely when it mattered." News – Item
• neom (on the frontier-lab rebuttal): "Jack Clark from anthropic was asked about some version of this on the BBC recently, and his reply was basically: If you're not at the frontier, you don't know what the frontier looks like, he implied that many models are simply not good enough yet to encounter some of the things the leadings labs are encountering." News – Item

Thread: News – Item

Vibe CLI CVE disclosure (low traction, high relevance)

SecMate's writeup of the shell permission bypass barely registered on HN (1 point), but it is the most consequential coding-agent news of the month for Vibe users: upgrade to 2.25.8 or later. News – Item , Secmate – Mistral Vibe Cve 2026 87987 Cve 2026 87984

Searches run

HN Algolia queries: "mistral" (by_date, tags=story, since 2026-08-14), "codestral" (0 hits in window), "mistral vibe" (4 hits). Reddit search (Old – Search) returned a login wall and could not be used, matching prior months; no Reddit signals extracted.

Reddit recovery (added 2026-10-03)

The Series D also carried Reddit: r/eutech (991 upvotes): "Mistral raises €3 billion for the development of..." Reddit – Mistral Raises 3 Billion For The Development Of . Product-side Reddit footprint is near zero: the Mistral Vibe CLI community counted 358 weekly visitors with 0 weekly contributions in the October 3 capture.

Enterprise Readiness

Terms explained:

• ECUs (European Compute Units) - see Key Terms; the enterprise mechanism for multi-year committed European compute. Source: Mistral AI – Regional Inference Open Models New Compute

Transparency Gaps