CVE-2026-93860

OpenStack Mistral through 23.0.0 does not enforce authorization on the /v2/maintenance API. The controller clears the request context and calls the maintenance service directly, so any holder of a valid Mistral token can read or change the cluster-wide maintenance state regardless of role. Setting that state to PAUSED stops processing of new workflow and execution objects for every tenant project until an operator restores it. Any deployment running Mistral at or below 23.0.0 is affected; the service is usually part of a private OpenStack control plane rather than a public site. There is no known public proof of concept and no report of exploitation in the wild.

What to do: Until a fix is published, limit who receives Mistral tokens and restrict network access to the Mistral API to trusted operators, and alert if the cluster maintenance state changes to PAUSED. Upgrade past 23.0.0 only when the OpenStack project ships a patched release; this advisory does not name a fixed version. Review maintenance-state history for unauthorized pauses of workflow processing.