https://seclists.org/oss-sec/2026/q4/103: [OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))
Published Oct 8, 2026
·Updated
Affected Software
1 affected component
Openstack Mistral<20.1.1, =21.0.0, =22.0.0, =23.0.0
Frequently Asked Questions
1
Which Mistral deployments should be treated as affected?
Deployments running a version earlier than 20.1.1, or exactly 21.0.0, 22.0.0, or 23.0.0, are listed as affected.
2
Are patches available for maintained release branches?
The advisory lists patch sets for the 2025.1/epoxy and 2025.2/flamingo branches. Review and apply the relevant patch set for the branch in use.