En bref
- CVE-2026-41283 est une vulnérabilité CRITIQUE (CVSS 9.9) touchant mistral.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.73%, plus élevée que 54.4% des vulnérabilités.
- Correctif : mettre à jour vers 20.1.1 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| mistral PyPI | = 21.0.0= 22.0.0≥ 20.0.0, < 20.1.1
| 20.1.1
|
Description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
NVD description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free