OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-41283US | —OT erhöht | — | ||
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of se… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2026/06/03/14WEB
- https://access.redhat.com/security/cve/CVE-2026-41283WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2484607WEB
- https://github.com/advisories/GHSA-9hfw-w3f4-c4p8ADVISORY
- https://github.com/openstack/mistralPACKAGE
- https://github.com/openstack/mistral/tagsWEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-41283ADVISORY
- https://pypi.org/project/mistralPACKAGE
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan