Login Request a demo
MI
Product
Mistral
by OpenStack · last CVE Oct 8, 2026
5
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 0
Severity
All severities5Critical1High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mistral to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-93858
8.7
0%
Oct 8
In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a…
Affected: before 20.1.1; 21.0.0 before 21.0.1; 22.0.0 before 22.0.1; 23.0.0
CVE-2026-97147
7.2
0%
Oct 8
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it
Affected: before 20.1.1; 21.0.0 before 21.0.1; 22.0.0 before 22.0.1; 23.0.0
CVE-2026-93860
7.1
0%
Oct 8
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement
Affected: before 20.1.1; 21.0.0 before 21.0.1; 22.0.0 before 22.0.1; 23.0.0
Showing 3