CVE-2026-97147: CWE-863 Incorrect Authorization in OpenStack Mistral
Description
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and environments. A project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with a resource of another project, which moves that resource into the caller's project and causes the original owner's subsequent updates of it to fail with server errors. Only deployments exposing the Mistral API are affected.
CVSS v4.0
Score 7.2high
Affected software
OpenStack
Mistral
pkg:pypi/mistralRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenStack Mistral versions up to and including 23.0.0 contain an authorization flaw (CWE-863) in several v2 API write paths. These paths resolve target objects using queries that may return resources from other projects, allowing authenticated project members to write to and modify those resources improperly. Additionally, project administrators can exploit naming collisions in embedded ad-hoc actions or workflows within workbooks to move resources from other projects into their own, disrupting the original owners' ability to update them. The vulnerability requires API exposure and authenticated access.
Potential Impact
An authenticated user with project membership can rewrite and un-publish another project's public action definitions and environments, potentially disrupting workflows and automation. Project administrators can cause resource ownership confusion and denial of updates by moving resources from other projects into their own via naming collisions. This can lead to operational disruptions and data integrity issues within affected OpenStack Mistral deployments.
Mitigation Recommendations
No explicit patch or vendor advisory is provided in the input data. Patch status is not yet confirmed — check the OpenStack vendor advisory for current remediation guidance. Until a fix is applied, restrict exposure of the Mistral API to trusted users only and limit project membership to trusted personnel to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-09-24T02:16:02.138Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac7d8742cdf04f6562d26ba
Added to database: 10/08/2026, 17:52:52 UTC
Last enriched: 10/08/2026, 18:03:40 UTC
Last updated: 10/08/2026, 21:45:54 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.