https://seclists.org/oss-sec/2026/q2/800: [OSSA-2026-020] OpenStack Mistral: Mistral policy enforcement bypass allows unauthorized public source cation and arbitrary code execution (CVE-2026-41283)
Published Jun 3, 2026
·Updated
Affected Software
1 affected component
Openstack Mistral>=20.0.0<20.1.1, =21.0.0, =22.0.0
Frequently Asked Questions
1
What is the severity of CVE-2026-41283?
CVE-2026-41283 is considered a critical severity vulnerability due to its capability to allow unauthorized public source creation and arbitrary code execution.
2
How do I fix CVE-2026-41283?
To remediate CVE-2026-41283, update to the latest version of OpenStack Mistral where the vulnerability has been patched.
3
What are the risks associated with CVE-2026-41283?
The risks of CVE-2026-41283 include unauthorized access, potential data breaches, and execution of arbitrary code on affected systems.
4
Who is affected by CVE-2026-41283?
CVE-2026-41283 affects all users of OpenStack Mistral prior to the security patch release.
5
What is the nature of the vulnerability in CVE-2026-41283?
CVE-2026-41283 is a policy enforcement bypass vulnerability that undermines authorization controls in OpenStack Mistral.