9.9
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
AI Analysis
Arbitrary Remote Code Execution in OpenStack Mistral through 22.0.0
Basic Information
ID
CVE-2026-41283
Source
mitre
Published
Jun 4, 2026 at 00:00
Modified
Jun 4, 2026 at 03:44
Affected Product
Vendor
OpenStack
Product
Mistral
Version
20.0.0
Affected Versions
OpenStack Mistral 20.0.0
OpenStack Mistral 21.0.0
OpenStack Mistral 22.0.0
OpenStack Mistral 21.0.0
OpenStack Mistral 22.0.0
CWE Classification
AI Assessment
AI Score
9.9 / 10
AI Severity
Critical
Vendor
OpenStack
Product
Mistral
Version
20.0.0, 21.0.0, 22.0.0