Bug 2544709 (CVE-2026-97147)

Summary: CVE-2026-97147 openstack-mistral: mistral: Cross-project resource tampering via missing ownership check in action definition and environment update paths
Product: [Other] Security Response Reporter: Robb Gatica <rgatica>
Component: vulnerabilityAssignee: Product Security <prodsec-ir-bot>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: eglynn, jjoyce, jpretori, jschluet, lhh, mburns, mgarciac, security-response-team
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in OpenStack Mistral. Due to a missing authorization check in the action definition and environment update paths, an authenticated user can modify or overwrite another project's publicly-scoped action definitions and environments. An attacker with a valid account in any project can craft an API request targeting a public resource by name and overwrite its content or change its scope. A project member can also create a workbook whose embedded action names collide with another project's public actions, transferring ownership of those resources to the attacker's project and causing the original owner's subsequent updates to fail. This vulnerability affects all deployments that expose the Mistral v2 API.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Deadline: 2026-10-08   

Description Robb Gatica 2026-10-01 18:55:49 UTC 
A flaw was found in OpenStack Mistral. Several of Mistral's v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can exploit this to rewrite and un-publish another project's public action definitions and environments. A project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with a resource of another project, moving that resource into the caller's project and causing the original owner's subsequent updates to fail with server errors.

All deployments exposing the Mistral API are affected.

Affected versions: <20.1.1, ==21.0.0, ==22.0.0, ==23.0.0

Reference: https://launchpad.net/bugs/2160267