CVE record · 1 source
CVE-2026-93860
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without…
- Vendor
- Red Hat
- Product
- OpenStack
- Exposure class
- Hypervisor
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without…
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of…