What is the CVSS score of CVE-2026-41283?

CVE-2026-41283 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of OpenStack Mistral are affected by CVE-2026-41283?

OpenStack Mistral deployments through version 22.0.0 face a critical remote code execution vulnerability that allows attackers with low-privilege service accounts to compromise the workflow…. A patch is available.

How to fix or mitigate CVE-2026-41283?

24 hours: Inventory all OpenStack Mistral instances running version 22.0.0 or earlier; implement network segmentation restricting Mistral API access to administrative networks only; enable detailed audit logging on all API endpoints; monitor vendor advisories for patch availability. 7 days: Audit and revoke unnecessary service account credentials within Mistral; rotate all credentials that Mistral holds for connected services (Nova, Cinder, Glance, etc.); review workflow execution logs for suspicious activity. 30 days: Evaluate long-term Mistral deployment strategy and timing for version updates; implement hardened application-level API gateway controls; review and strengthen access controls across interconnected OpenStack services.

OpenStack Mistral CVE-2026-41283

EUVD-2026-34201 CRITICAL

Incorrect Authorization (CWE-863)

2026-06-03

GHSA-9hfw-w3f4-c4p8

RCE Authentication Bypass

9.9

CVSS 3.1 · Vendor

Severity by source

Vendor (CNA) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SUSE

CRITICAL

qualitative

Red Hat

9.9 HIGH

qualitative

Primary rating from Vendor (CNA).

CVSS VectorVendor

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jun 04, 2026 - 05:00 EUVD

Analysis Updated

Jun 04, 2026 - 04:28 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 04, 2026 - 04:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 04, 2026 - 04:22 vuln.today

cvss_changed

CVSS changed

Jun 04, 2026 - 04:22 NVD

9.9 (CRITICAL)

Analysis Generated

Jun 03, 2026 - 18:16 vuln.today

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Remote code execution in OpenStack Mistral through version 22.0.0 allows authenticated attackers with low privileges to execute arbitrary code via exposed API endpoints, leading to exfiltration of service credentials and full compromise of the workflow service. The CVSS 9.9 score reflects scope change (S:C) meaning impact extends beyond Mistral itself into other OpenStack components whose credentials it holds. There is no public exploit identified at time of analysis, but the vulnerability is tagged as Authentication Bypass and RCE, and disclosure occurred via oss-security with vendor coordination.

Technical ContextAI

OpenStack Mistral is the workflow-as-a-service component of OpenStack that orchestrates tasks across other OpenStack services (Nova, Neutron, Keystone, etc.) and stores service credentials to perform these operations on behalf of users. The CWE-863 (Incorrect Authorization) classification indicates the API performs authorization checks but applies them incorrectly, permitting low-privileged callers to reach endpoints that evaluate user-supplied expressions or actions which Mistral's engine executes server-side. Because Mistral natively supports YAQL/Jinja expression evaluation and action execution as part of its workflow definition language, endpoints exposing those primitives without correct authorization translate directly into arbitrary code execution within the Mistral process context.

RemediationAI

Patch available per vendor advisory - upgrade Mistral to a version newer than 22.0.0 as published on https://github.com/openstack/mistral/tags and track the OpenStack VMT bulletin linked from https://security.openstack.org/vmt.html and the oss-security disclosure at https://seclists.org/oss-sec/2026/q2/800 for the exact fixed release identifier, which is not enumerated in the input data. Until patched, restrict network reachability of the Mistral API to trusted operator networks via firewall or service-listener bind address (side effect: end users lose self-service workflow submission), tighten Keystone role assignments so only trusted project members hold any role granting Mistral API access (side effect: legitimate automation accounts need policy review), and audit recent Mistral execution and action-execution logs for unexpected workflow definitions or std.* action calls that could indicate prior abuse.