PyPI: mistral
CVE-2026-41283
Safety vulnerability ID: SFTY-20260604-29113
Affected versions of the OpenStack Mistral package are vulnerable to Arbitrary Remote Code Execution due to insufficient access control on exposed API endpoints. Vulnerable endpoints allow arbitrary code execution by accepting and processing untrusted input without proper validation. An attacker can exploit this vulnerability by sending crafted requests to the exposed API, resulting in unauthorized code execution and potentially exfiltrating service credentials.
Overview
OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed
Advisory
mistral – Arbitrary Remote Code Execution
Affected Package
Also affects
---
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
References
- https://getsafety.com/vulnerabilities/SFTY-20260604-29113/CVE-2026-41283
- https://nvd.nist.gov/vuln/detail/CVE-2026-41283
- https://github.com/openstack/mistral/tags
- https://www.openwall.com/lists/oss-security/2026/06/03/14
- http://www.openwall.com/lists/oss-security/2026/06/03/14
- https://security.openstack.org/ossa/OSSA-2026-020.html
- https://access.redhat.com/security/cve/CVE-2026-41283
- https://bugzilla.redhat.com/show_bug.cgi?id=2484607
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41283.json
- https://github.com/advisories/GHSA-9hfw-w3f4-c4p8
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more