CVE-2026-41283

Katalog CVE

CVSS 9.9 · Critical EPSS 0,92%

Kerentanan Incorrect Authorization. Skor CVSS 3.1 9.9 (Critical) menurut mitre.org.

Deskripsi (NVD)

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

Rincian

Terbit di NVD

4 Juni 2026

Terakhir diubah

22 Juli 2026

Status NVD

Awaiting Analysis

CVSS 3.1

9.9 (Critical), sumber mitre.org
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization
CWE-749: Exposed Dangerous Method or Function

EPSS (30 hari)

0,92% peluang dieksploitasi; lebih tinggi dari 59,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/openstack/mistral/tags
• https://security.openstack.org/ossa/OSSA-2026-020.html
• https://www.openwall.com/lists/oss-security/2026/06/03/14
• http://www.openwall.com/lists/oss-security/2026/06/03/14
• https://access.redhat.com/security/cve/CVE-2026-41283
• https://bugzilla.redhat.com/show_bug.cgi?id=2484607
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41283.json