OpenStack Mistral versions up to 22.0.0 expose a set of API endpoints that can be used to execute arbitrary code. An attacker that can reach the vulnerable API endpoint will be able to run code with the permissions of the Mistral service process, potentially leading to disclosure of credentials and other sensitive system information. The weakness is a failure to restrict the execution of user-supplied code and is classified as CWE‑863.

The vulnerability affects the OpenStack Mistral service, specifically all releases through 22.0.0. Users running these versions should verify that the API is not publicly accessible from untrusted networks.

The CVSS score is 9.9, indicating critical severity. EPSS data is not available, so the current exploitation probability cannot be determined, but the absence of a KEV listing does not mitigate the high potential impact. If the Mistral API is exposed to potentially hostile networks, an attacker can invoke the vulnerable endpoints and achieve full code execution on the host where Mistral runs.