Skip to content
fr Sign in
8.7 High

CVE-2026-93858 In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to…

Description

In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.

Affected products and versions

Product Affected versions Fixed in
Mistral 23.0.0 No fix stated
Mistral 22.0 22.0.0 → < 22.0.1 22.0.1
Mistral 21.0 21.0.0 → < 21.0.1 21.0.1
Mistral 20.1 earliest → < 20.1.1 20.1.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Mistral

The 5 CVEs of Mistral →
CVE-2026-97147 In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can… 7.2 High CVE-2026-93861 In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another… 6.0 Medium CVE-2026-93860 In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the… 7.1 High CVE-2026-41283 OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed 9.9 Critical
Track this CVE