OpenStack Mistral up to 20.1.0/21.0.0/22.0.0/23.0.0 SSH Proxy std.ssh_proxied proxy_command os command injection

Summaryinfo

A vulnerability identified as very critical has been detected in OpenStack Mistral up to 20.1.0/21.0.0/22.0.0/23.0.0. Affected by this issue is the function std.ssh_proxied of the component SSH Proxy. Performing a manipulation of the argument proxy_command results in os command injection. This vulnerability is known as CVE-2026-93858. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as very critical, was found in OpenStack Mistral up to 20.1.0/21.0.0/22.0.0/23.0.0. This affects the function std.ssh_proxied of the component SSH Proxy. The manipulation of the argument proxy_command with an unknown input leads to a os command injection vulnerability. CWE is classifying the issue as CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.

It is possible to read the advisory at launchpad.net. This vulnerability is uniquely identified as CVE-2026-93858 since 09/18/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/08/2026). The attack technique deployed by this issue is T1202 according to MITRE ATT&CK.

Upgrading to version 20.1.1, 21.0.1 or 22.0.1 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Cloud Software

Vendor

• OpenStack

Name

• Mistral

Version

• 20.0
• 20.1.0
• 21.0
• 22.0
• 23.0

License

• free

Website

• Vendor: https://www.openstack.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion