{"schema":"vulnpedia.research/1","cve":"CVE-2026-93858","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://launchpad.net/bugs/2162100","tags":["issue-tracking","exploit","vendor-reference"],"source":"mitre","sourceId":"mitre","modified":"2026-10-08T17:28:58.167Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-08T17:28:58.167Z","url":"https://launchpad.net/bugs/2162100"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-08T17:56:35.058Z","url":"https://launchpad.net/bugs/2162100"},{"source":"nvd","sourceId":"CVE-2026-93858","modified":"2026-10-08T21:10:41.427","url":"https://launchpad.net/bugs/2162100"},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://launchpad.net/bugs/2162100"}]},{"url":"https://security.openstack.org/ossa/OSSA-2026-044.html","tags":[],"source":"mitre","sourceId":"mitre","modified":"2026-10-08T17:28:58.167Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-08T17:28:58.167Z","url":"https://security.openstack.org/ossa/OSSA-2026-044.html"},{"source":"nvd","sourceId":"CVE-2026-93858","modified":"2026-10-08T21:10:41.427","url":"https://security.openstack.org/ossa/OSSA-2026-044.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93858","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-93858"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2544711","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2544711"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93858","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-93858"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93858","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93858"}]},{"source":"euvd","sourceId":"EUVD-2026-95121","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95121","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95121","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95121"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):openstack-mistral-all","product":"openstack-mistral-all as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/openstack-mistral-all","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):openstack-mistral-api","product":"openstack-mistral-api as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/openstack-mistral-api","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):openstack-mistral-common","product":"openstack-mistral-common as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/openstack-mistral-common","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):openstack-mistral-engine","product":"openstack-mistral-engine as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/openstack-mistral-engine","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):openstack-mistral-event-engine","product":"openstack-mistral-event-engine as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/openstack-mistral-event-engine","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):openstack-mistral-executor","product":"openstack-mistral-executor as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/openstack-mistral-executor","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):openstack-mistral.src","product":"openstack-mistral.src as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/openstack-mistral?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):python-mistral","product":"python-mistral as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/python-mistral","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_13_(queens):python-mistral-tests","product":"python-mistral-tests as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/python-mistral-tests","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:openstack-mistral-all","product":"openstack-mistral-all as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/openstack-mistral-all","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:openstack-mistral-api","product":"openstack-mistral-api as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/openstack-mistral-api","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:openstack-mistral-common","product":"openstack-mistral-common as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/openstack-mistral-common","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:openstack-mistral-engine","product":"openstack-mistral-engine as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/openstack-mistral-engine","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:openstack-mistral-event-engine","product":"openstack-mistral-event-engine as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/openstack-mistral-event-engine","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:openstack-mistral-executor","product":"openstack-mistral-executor as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/openstack-mistral-executor","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:openstack-mistral-notifier","product":"openstack-mistral-notifier as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/openstack-mistral-notifier","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:python3-mistral","product":"python3-mistral as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/python3-mistral","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]},{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json","productId":"red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-mistral-event-engine","product":"rhosp-rhel8/openstack-mistral-event-engine as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Operators can disable the std.ssh_proxied action by adding 'std.ssh_proxied' to the denylist under the [action_providers] section of mistral.conf and restarting the Mistral executor service. Alternatively, restrict workflow execution privileges so that only trusted users or service accounts can create and run workflows containing std.ssh_proxied actions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/openstack-mistral-event-engine?repository_url=registry.redhat.io/rhosp-rhel8/openstack-mistral-event-engine","origins":[{"source":"redhat","sourceId":"CVE-2026-93858","modified":"2026-10-09T16:24:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93858.json"}]}],"vendorCoverage":{"total":18,"shown":18,"omitted":0,"source":"redhat"}}