Dismissed
(not in Nixpkgs)
Permalink
CVE-2026-41283
9.9 CRITICAL
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Changed (C)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Changed (C)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when …
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
References
Affected products
Mistral
- ==22.0.0
- ==21.0.0
- <20.1.1
Matching in nixpkgs
pkgs.mistral-rs
Blazingly fast LLM inference
pkgs.mistral-vibe
Minimal CLI coding agent by Mistral
pkgs.mistralclient
OpenStack Mistral Command-line Client
pkgs.python313Packages.mistralai
Python client library for Mistral AI platform
pkgs.python314Packages.mistralai
Python client library for Mistral AI platform
pkgs.python313Packages.llm-mistral
LLM plugin providing access to Mistral models using the Mistral API
pkgs.python314Packages.llm-mistral
LLM plugin providing access to Mistral models using the Mistral API
pkgs.python313Packages.mistral-common
Tools to help you work with Mistral models
pkgs.python314Packages.mistral-common
Tools to help you work with Mistral models
pkgs.python313Packages.langchain-mistralai
Build LangChain applications with mistralai
pkgs.python314Packages.langchain-mistralai
Build LangChain applications with mistralai
pkgs.python313Packages.python-mistralclient
OpenStack Mistral Command-line Client
Package maintainers
-
@GaetanLepage Gaetan Lepage <gaetan@glepage.com>
-
@mana-byte Manaiki Laut <manaikilaut@gmail.com>
-
@shikanime William Phetsinorath <william.phetsinorath@shikanime.studio>
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
-
@vinetos vinetos <contact+git@vinetos.fr>
-
@anthonyroussel Anthony Roussel <anthony@roussel.dev>
-
@sarahec Sarah Clark <seclark@nextquestion.net>
-
@philiptaron Philip Taron <philip.taron@gmail.com>
-
@bgamari Ben Gamari <ben@smart-cactus.org>