Aller au contenu
en Se connecter
8.7 Élevée

CVE-2026-93858 In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to…

Description

In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.

Produits et versions touchés

Produit Versions touchées Corrigé en
Mistral 23.0.0 Pas de correctif indiqué
Mistral 22.0 22.0.0 → < 22.0.1 22.0.1
Mistral 21.0 21.0.0 → < 21.0.1 21.0.1
Mistral 20.1 premières → < 20.1.1 20.1.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Mistral

Les 5 CVE de Mistral →
CVE-2026-97147 In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can… 7.2 Élevée CVE-2026-93861 In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another… 6.0 Moyenne CVE-2026-93860 In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the… 7.1 Élevée CVE-2026-41283 OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed 9.9 Critique
Suivre cette CVE