Command Injection Vulnerability in OpenStack Mistral Affecting Various Deployments

CVE-2026-93858

What is CVE-2026-93858?

In OpenStack Mistral, specifically in versions up to 23.0.0, a vulnerability exists within the std.ssh_proxied action. This issue arises when the proxy_command parameter, provided by a caller, is passed directly to paramiko.ProxyCommand() without sanitization. As a result, an authenticated project member can exploit the standard action-execution API to execute arbitrary local commands on the executor host. This occurs within the context of the executor's service account, regardless of the outcome of the SSH connection. Notably, only those Mistral deployments that have enabled the std.ssh_proxied action, which is the default configuration, are susceptible to this vulnerability.

References