Em resumo
- CVE-2026-41283 é uma vulnerabilidade CRÍTICO (CVSS 9.9) que afeta mistral.
- Chance de exploração nos próximos 30 dias (EPSS): 0.73%, maior que 54.4% das vulnerabilidades.
- Correção: atualize para 20.1.1 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| mistral PyPI | = 21.0.0= 22.0.0≥ 20.0.0, < 20.1.1
| 20.1.1
|
Description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
NVD description
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free