Vulnerability Description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/openstack/mistral/tags
- https://security.openstack.org/ossa/OSSA-2026-020.html
- https://www.openwall.com/lists/oss-security/2026/06/03/14
- http://www.openwall.com/lists/oss-security/2026/06/03/14
- https://access.redhat.com/security/cve/CVE-2026-41283
- https://bugzilla.redhat.com/show_bug.cgi?id=2484607
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41283.json
FAQ
What is CVE-2026-41283?
CVE-2026-41283 is a vulnerability with a CVSS score of 9.9 (CRITICAL). OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
How severe is CVE-2026-41283?
CVE-2026-41283 has been rated CRITICAL with a CVSS base score of 9.9/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-41283?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.