Kurz gesagt
- CVE-2026-41283 ist eine Schwachstelle (KRITISCH (CVSS 9.9)) in mistral.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.73%, höher als bei 54.4% aller Schwachstellen.
- Abhilfe: auf 20.1.1 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| mistral PyPI | = 21.0.0= 22.0.0≥ 20.0.0, < 20.1.1
| 20.1.1
|
Description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
NVD description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free