Skip to main content
Mallory
Critical

OpenStack Mistral API Policy Bypass Leading to Remote Code Execution

IdentifiersCVE-2026-41283CWE-862

CVE-2026-41283 is a critical vulnerability in OpenStack Mistral affecting deployments through version 22.0.0. Several Mistral API endpoints fail to enforce required access policies, allowing any authenticated user to create public resources and upload arbitrary code. That code is then executed on Mistral executor workers. The flaw is fundamentally an authorization/policy-enforcement failure in administrative or privileged API operations, enabling a low-privileged authenticated tenant to reach code-execution paths that should be restricted. Affected versions include >=20.0.0 and <20.1.1, 21.0.0, and 22.0.0, particularly where the Mistral API is exposed.

Share:
For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation allows arbitrary remote code execution on Mistral executor workers. An attacker can use this access to extract sensitive data from the worker environment, including service credentials and configuration material, potentially enabling deeper compromise of the OpenStack control plane or connected infrastructure. Because the issue is reachable by an authenticated user and affects workflow execution infrastructure, impact includes unauthorized code execution, credential theft, and follow-on lateral movement or privilege escalation within the cloud environment.

Mitigation

If you can’t patch tonight, do this now.

Until patched, restrict or eliminate exposure of the Mistral API. Limit network access to trusted administrative hosts and internal systems only, and prevent untrusted tenants or external users from reaching the vulnerable API endpoints. Where possible, disable Mistral API access if not operationally required and review authentication and tenant access to reduce the pool of users able to reach the affected endpoints.

Remediation

Patch, then assume compromise.

Apply the vendor patches released by OpenStack for the affected Mistral branches. The provided content indicates fixes are available for the Epoxy, Flamingo, Gazpacho, and Hibiscus release branches. Upgrade affected deployments from vulnerable versions (>=20.0.0 and <20.1.1, 21.0.0, and 22.0.0) to the corresponding fixed release provided by the vendor. Administrators should review exposed Mistral API deployments and update immediately.
PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.
Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity10

Community discussion across Reddit, Mastodon, and other social sources.