Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-93861

Quick assessment

Affected
OpenStack Mistral
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 OpenStack Mistral 23.0.0 及更早版本中，工作流成员资格 API 允许一个已接受共享其他项目私有工作流权限的项目，进一步创建一个新的成员资格条目，并指定第三个项目作为新的成员。新创建的成员资格条目的 project_id 被默认设置为接受共享的项目，而非原始工作流的所有者。因此，原始工作流的所有者既无法查看也无法删除该成员资格条目。 第三个项目可以接受这个成员资格（尽管它并未实际获得所有者的授权），随后读取并执行该所有者的私有工作流。此后，只有接受共享的项目（而非所有者）能够撤销对该工作的

CVSS 6.0 · Medium

Affected Version Matrix 4

VendorProduct Version RangeStatus
OpenStack Mistral < 20.1.1 affected
21.0.0< 21.0.1 affected
22.0.0< 22.0.1 affected
23.0.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-93861

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its project_id defaulted to the accepting project rather than the original workflow owner, and thus the owner can neither see nor delete it. The third project can accept this membership (that it had not actually been granted by the owner), and then read and execute the owner's private workflow; only the accepting (not the owning) project can later revoke that access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
OpenStack Mistral 0 ~ 20.1.1 -

II. Public POCs for CVE-2026-93861

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-93861

请登录查看更多情报信息。

Other References for CVE-2026-93861 (2)

Same Patch Batch · OpenStack · 2026-10-08 · 4 CVEs total

CVE-2026-93858 8.7 HIGH OpenStack Mistral≤23.0.0远程命令执行漏洞
CVE-2026-97147 7.2 HIGH OpenStack Mistral 23.0.0越权修改/接管项目资源漏洞
CVE-2026-93860 7.1 HIGH OpenStack Mistral≤23.0.0 API越权致服务中断

IV. Related Vulnerabilities

Same product: Mistral
Same vendor: OpenStack
Same weakness: CWE-863

V. Comments for CVE-2026-93861

No comments yet

Leave a comment