CVE-2026-97147

OpenStack Mistral through 23.0.0 has an incorrect-authorization flaw (CWE-863) in several v2 API write paths. Those paths look up the target with a query that can return another project's resource and then write to it. An authenticated project member can rewrite and un-publish another project's public action definitions and environments, and a project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with another project's resource, moving that resource into the caller's project so the original owner's later updates fail with server errors. Only deployments that expose the Mistral API are affected. No public proof of concept is known and the issue is not in CISA KEV.

What to do: Limit network access to the Mistral API to trusted operators and project users, and treat any internet exposure of that API as in scope. Review public action definitions, environments, and workbooks for unexpected rewrites, un-publishing, or ownership moves across projects. The report covers every release through 23.0.0 and does not name a fixed version, so apply the OpenStack security update or backport when it is published and re-check those resources afterward.