OpenStack Mistral versions up to 22.0.0 expose a set of API endpoints that can be used to execute arbitrary code. An attacker that can reach the vulnerable API endpoint will be able to run code with the permissions of the Mistral service process, potentially leading to disclosure of credentials and other sensitive system information. The weakness is a failure to restrict the execution of user-supplied code and is classified as CWE‑749 and CWE‑863.

The vulnerability affects the OpenStack Mistral service, specifically all releases through 22.0.0. Users running these versions should verify that the API is not publicly accessible from untrusted networks.

The CVSS score is 9.9, indicating critical severity. The EPSS score is < 1%, suggesting a very low but non-zero exploitation probability, though the absence of a KEV listing does not mitigate the high potential impact. If the Mistral API is exposed to potentially hostile networks, an attacker can invoke the vulnerable endpoints and achieve full code execution on the host where Mistral runs.