{"vulnerability": "cve-2026-41283", "sightings": [{"uuid": "d9af0a21-fa88-4425-adb4-196f57f98145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41283", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnfngopmqq2d", "content": "[OSSA-2026-020] OpenStack Mistral: Mistral policy enforcement bypass allows unauthorized public resource creation and arbitrary code execution (CVE-2026-41283)", "creation_timestamp": "2026-06-03T17:37:06.756620Z"}, {"uuid": "bdc24a94-23a5-42be-a144-4673f9440a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41283", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mngtqx3mc725", "content": "\ud83d\udd34 CVE-2026-41283 - Critical (9.9)\n\nOpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41283/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T05:00:56.289674Z"}, {"uuid": "1888f049-6e1f-4527-bf06-541094cb7d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41283", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mngub7hyjf24", "content": "CVE-2026-41283 - Critical RCE in OpenStack Mistral. API exposure allows code exec & credential exfiltration. CVSS 9.9. No patch yet - restrict API access immediately. #CVE #OpenStack #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-41283/", "creation_timestamp": "2026-06-04T05:10:01.573685Z"}, {"uuid": "ea064604-39e1-417b-9985-cd52c90966b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41283", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mngx3zokns2v", "content": "CRITICAL: Remote code execution in OpenStack Mistral (20.0.0 \u2013 22.0.0) via exposed API (CVE-2026-41283). No patch yet \u2014 restrict API access now! Full system risk. https://radar.offseq.com/threat/cve-2026-41283-cwe-863-incorrect-authorization-in--186d9351 #OffSeq #OpenStack #Vulnerability", "creation_timestamp": "2026-06-04T06:00:48.895316Z"}, {"uuid": "604a6fc7-c22b-4608-b610-1780f85c84d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41283", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116690311321671815", "content": "\ud83d\udea8 CRITICAL: CVE-2026-41283 in OpenStack Mistral (v20.0.0 \u2013 22.0.0) allows remote code execution via exposed API. No patch yet. Restrict API to trusted users & monitor closely. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-41283-cwe-863-incorrect-authorization-in--186d9351 #OffSeq #OpenStack #Vuln #CloudSec", "creation_timestamp": "2026-06-04T06:00:56.654286Z"}, {"uuid": "8783c9eb-287a-475d-8115-b9d485f178f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41283", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngzknmbyz2x", "content": "CVE-2026-41283 - OpenStack Mistral Arbitrary Remote Code Execution\nCVE ID : CVE-2026-41283\n \n Published : June 4, 2026, 4:17 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There a...", "creation_timestamp": "2026-06-04T06:44:46.446719Z"}, {"uuid": "b1387b38-1d65-45d4-abcb-130a77f2a81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41283", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpjrzzq3ik2p", "content": "\u300cOpenStack Mistral\u300d\u306b\u8106\u5f31\u6027 - API\u8a8d\u8a3c\u30e6\u30fc\u30b6\u30fc\u304c\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\n\n\u300cOpenStack\u300d\u74b0\u5883\u306b\u304a\u3044\u3066\u8907\u6570\u306e\u51e6\u7406\u306b\u5bfe\u3059\u308b\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u5236\u5fa1\u3092\u884c\u3046\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u300cOpenStack Mistral\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e746\u67083\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u6027\u300cCVE-2026-41283\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u8907\u6570\u306e\u300cMistral API\u300d\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u304a\u3044\u3066\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u30dd\u30ea\u30b7\u30fc\u306e\u8a2d\u5b9a\u306b\u4e0d\u5099\u304c\u5b58\u5728\u3002\u8a8d\u53ef\u51e6\u7406\u304c\u9069\u5207\u306b\u884c\u308f\u308c\u305a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u3067\u3042\u308c\u3070\u3001\u516c\u958b\u30ea\u30bd\u30fc\u30b9\u3092\u4f5c\u6210\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002\n\n\u8106\u5f31\u6027\u3092...", "creation_timestamp": "2026-06-30T19:58:35.201932Z"}, {"uuid": "3f6ecb65-8395-4ba0-9b01-0d3ca78afa61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41283", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcogqpbe2r", "content": "CVE-2026-41283 - mistral\nMistral's API endpoints allow attackers to execute arbitrary code on a system, potentially stealing sensitive service credentials. This can happen if the API is exposed to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mistral #openstack #pip #CVE #infosec", "creation_timestamp": "2026-07-23T16:58:04.717912Z"}]}