En resumen
- CVE-2026-41283 es una vulnerabilidad CRÍTICO (CVSS 9.9) que afecta a mistral.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.73%, mayor que el 54.4% de las vulnerabilidades.
- Solución: actualizar a 20.1.1 o posterior.
| Package | Affected versions | Patched versions |
|---|
| mistral PyPI | = 21.0.0= 22.0.0≥ 20.0.0, < 20.1.1
| 20.1.1
|
Description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
NVD description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free