[OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))

As cited

Copy frozen at 2026-10-09 08:33 UTC (site build).

vulnerabilities

[OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))

OpenStack released a security advisory covering four authorization and privilege escalation vulnerabilities in Mistral affecting versions prior to 20.1.1 and specific releases 21.0.0, 22.0.0, and 23.0.0. The advisory identifies CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, and CVE-2026-97147 as the affected flaws.

Why it matters: OpenStack Mistral operators running vulnerable versions need to patch immediately to prevent unauthorized access and privilege escalation within their workflow automation infrastructure.

Source published

2026-10-09 06:04 UTC

First seen by Cybersecurity Tracker

2026-10-09 06:57 UTC