CVE-2026-93861: CWE-863 Incorrect Authorization in OpenStack Mistral
Description
In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its project_id defaulted to the accepting project rather than the original workflow owner, and thus the owner can neither see nor delete it. The third project can accept this membership (that it had not actually been granted by the owner), and then read and execute the owner's private workflow; only the accepting (not the owning) project can later revoke that access.
CVSS v4.0
Score 6.0medium
Affected software
OpenStack
Mistral
pkg:github/openstack/mistralRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In OpenStack Mistral versions up to 23.0.0, the workflow membership API improperly handles project memberships. When a project accepts a share of another project's private workflow, it can create a new membership for a third project. This new membership is recorded with the accepting project's ID rather than the original workflow owner's ID. Consequently, the workflow owner cannot view or remove this membership. The third project can accept the membership without authorization from the owner and gain read and execute permissions on the owner's private workflow. Revocation of this access is only possible by the accepting project, not the owner.
Potential Impact
This vulnerability allows unauthorized projects to gain read and execute access to private workflows they were not granted permission to use. The original workflow owner loses control over these unauthorized memberships, as they cannot see or revoke them. This can lead to unauthorized disclosure and execution of sensitive workflows within OpenStack Mistral.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict workflow sharing and membership creation privileges to trusted projects only. Monitor for unusual membership creations and limit permissions where possible.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-09-18T19:15:59.203Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac7dbad2cdf04f6562dde40
Added to database: 10/08/2026, 18:06:37 UTC
Last enriched: 10/08/2026, 18:18:35 UTC
Last updated: 10/08/2026, 21:45:55 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.