{"id":"CVE-2026-93858","aliases":["DEBIAN-CVE-2026-93858","EUVD-2026-95121","GHSA-gxqc-3r52-88h8","UBUNTU-CVE-2026-93858"],"status":"published","title":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied...","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00429,"percentile":0.37554,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2026-10-08T17:28:58Z","modified":"2026-10-28T02:30:55Z","fixes":[{"ecosystem":"Debian:14","package":"mistral","fixed_in":["23.0.0-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["15.0.0-1","15.0.0-1+deb12u1","16.0.0-1","16.0.0-2","16.0.0-3","16.0.0-4","16.0.0~rc1-1","17.0.0-1","17.0.0-2","17.0.0-3","17.0.0~rc1-1","18.0.0~rc1-1","18.0.1-1","19.0.0-1","19.0.0-2","19.0.0~rc1-1","19.0.0~rc1-2","20.0.0-1","20.0.0-2","20.0.0~rc1-1","20.0.0~rc1-2","21.0.0-1","21.0.0-2","21.0.0-4","21.0.0-5","21.0.0-6","21.0.0~rc1-1","21.0.0~rc1-2","22.0.0-1","22.0.0-3","22.0.0~rc1-1","22.0.0~rc1-2","22.0.0~rc1-3","23.0.0-1","23.0.0-2","23.0.0~rc1-1","23.0.0~rc1-2"]},{"source":"osv","ecosystem":"Debian:13","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20.0.0-2","20.0.0-2+deb13u1","21.0.0-1","21.0.0-2","21.0.0-4","21.0.0-5","21.0.0-6","21.0.0~rc1-1","21.0.0~rc1-2","22.0.0-1","22.0.0-3","22.0.0~rc1-1","22.0.0~rc1-2","22.0.0~rc1-3","23.0.0-1","23.0.0-2","23.0.0~rc1-1","23.0.0~rc1-2"]},{"source":"osv","ecosystem":"Debian:14","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.0-2"}]}],"versions":["20.0.0-2","21.0.0-1","21.0.0-2","21.0.0-4","21.0.0-5","21.0.0-6","21.0.0~rc1-1","21.0.0~rc1-2","22.0.0-1","22.0.0-3","22.0.0~rc1-1","22.0.0~rc1-2","22.0.0~rc1-3","23.0.0-1","23.0.0~rc1-1","23.0.0~rc1-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0-1","1.0.0-4","2.0.0~b3-3","2.0.0~rc1-1","2.0.0~rc2-1","2.0.0-1","2.0.0-1ubuntu2","2.0.0-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-0ubuntu1","6.0.0~b1-0ubuntu1","6.0.0~b1-0ubuntu2","6.0.0~b2-0ubuntu1","6.0.0~rc1-0ubuntu1","6.0.0-0ubuntu1","6.0.0-0ubuntu1.1","6.0.0-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.0-0ubuntu1","10.0.0~b1~git2019121815.bc46b29f-0ubuntu1","10.0.0~b2~git2020020609.5b5576dd-0ubuntu1","10.0.0~b3~git2020032611.8a5d35ac-0ubuntu1","10.0.0~b3~git2020041013.a7da00d7-0ubuntu1","10.0.0-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13.0.0-0ubuntu1","13.0.0+git2021120910.b2d6de56-0ubuntu1","13.0.0+git2022030313.55bb2564-0ubuntu1","14.0.0-0ubuntu1","14.0.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.0-0ubuntu1","18.0.0~rc1-0ubuntu1","18.0.1-0ubuntu1","18.0.1-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.0.0-0ubuntu1","22.0.0-0ubuntu2","22.0.0+git20260814.61.b4aeb55-0ubuntu1","23.0.0~rc1-0ubuntu1","23.0.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mistral","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.0-0ubuntu1","21.0.0+git20260106.10.420677c8-0ubuntu1","22.0.0-0ubuntu1","22.0.0-0ubuntu1.1"]}],"products":[{"vendor":"openstack","product":"mistral"}],"references":[{"url":"https://launchpad.net/bugs/2162100","tags":["issue-tracking","exploit","report"]},{"url":"https://security.openstack.org/ossa/OSSA-2026-044.html","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93858","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxqc-3r52-88h8"},{"url":"https://opendev.org/openstack/mistral","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93858.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-93858","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-93858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93858","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-93858","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","status":"published","published":"2026-10-08T17:28:58.167Z","modified":"2026-10-08T17:56:35.058Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:19:54.50686Z"}],"euvd":[{"id":"EUVD-2026-95121","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","status":"published","published":"2026-10-08T17:28:58Z","modified":"2026-10-08T17:56:35Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:27:28.108203Z"}],"ghsa":[{"id":"GHSA-gxqc-3r52-88h8","title":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied...","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","status":"published","published":"2026-10-08T18:32:30Z","modified":"2026-10-08T18:32:39Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:12:57.86261Z"}],"nvd":[{"id":"CVE-2026-93858","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","status":"published","published":"2026-10-08T18:18:30.817Z","modified":"2026-10-08T21:10:41.427Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:55.142936Z"}],"osv":[{"id":"CVE-2026-93858","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","status":"published","published":"2026-10-08T17:28:58.167Z","modified":"2026-10-28T02:30:55.946508722Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:45:20.931171Z"},{"id":"DEBIAN-CVE-2026-93858","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","status":"published","published":"2026-10-08T18:18:30.817Z","modified":"2026-10-13T05:00:12.101014499Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:46:06.846102Z"},{"id":"UBUNTU-CVE-2026-93858","description":"In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.","status":"published","published":"2026-10-08T18:18:00Z","modified":"2026-10-17T13:01:18.68928668Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:57:44.071534Z"}]}}