OpenStack Mistral vulnerabilities
5 published CVEs name OpenStack Mistral among the affected products.
- Published CVEs
- 5
- Last 12 months
- 5
- Critical
- 1
- Known exploited
- 0
Critical 1High 3Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2026-97147
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then…
OpenStack · Mistral
High7.2 - CVE-2026-93861
In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a…
OpenStack · Mistral
Medium6.0 - CVE-2026-93860
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any…
OpenStack · Mistral
High7.1 - CVE-2026-93858
In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH…
OpenStack · Mistral
High8.7 - CVE-2026-41283
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead…
OpenStack · Mistral
Critical9.9