OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41283US | —OT elevated | — | ||
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of se… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2026/06/03/14WEB
- https://access.redhat.com/security/cve/CVE-2026-41283WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2484607WEB
- https://github.com/advisories/GHSA-9hfw-w3f4-c4p8ADVISORY
- https://github.com/openstack/mistralPACKAGE
- https://github.com/openstack/mistral/tagsWEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-41283ADVISORY
- https://pypi.org/project/mistralPACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan