PT-2026-46137 · Openstack · Mistral

Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-41283

Mitre

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-41283

Affected Products

Mistral

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-41283 · Security Note
• https://openwall.com/lists/oss-security/2026/06/03/14 · Note
• https://github.com/openstack/mistral/tags · Note