CVEvulnerability

CVE-2026-41283

9.9 CRITICAL Published 2026-06-04 Modified 2026-07-22 Official page ↗

Status: Awaiting Analysis
Published: 2026-06-04
Last modified: 2026-07-22
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c): 9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses: CWE-749, CWE-863

Description

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

Weakness · CWE (2)

CWE-749 Exposed Dangerous Method or Function weakness
CWE-863 Incorrect Authorization weakness

References

https://github.com/openstack/mistral/tags github.com
https://security.openstack.org/ossa/OSSA-2026-020.html security.openstack.org
https://www.openwall.com/lists/oss-security/2026/06/03/14 www.openwall.com
http://www.openwall.com/lists/oss-security/2026/06/03/14 www.openwall.com
https://access.redhat.com/security/cve/CVE-2026-41283 access.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2484607 bugzilla.redhat.com
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41283.json security.access.redhat.com

CVE-2026-41283

Description

Related

Weakness · CWE (2)

References