PYSEC-2026-1849
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/python-mistralclient/PYSEC-2026-1849.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-1849
- Aliases
-
- CVE-2021-4472
- GHSA-75hx-6r6j-hw56
- Published
- 2026-07-07T16:03:10.958192Z
- Modified
- 2026-07-07T17:47:51.799268501Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- OpenStack's Mistral Client has a local file inclusion vulnerability
- Details
-
The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2021-4472
- https://access.redhat.com/security/cve/CVE-2021-4472
- https://bugs.launchpad.net/horizon/+bug/1931558
- https://bugzilla.redhat.com/show_bug.cgi?id=2417321
- https://lists.debian.org/debian-lts-announce/2025/12/msg00002.html
- https://lists.debian.org/debian-lts-announce/2025/12/msg00003.html
- https://opendev.org/openstack/mistral-dashboard
- https://review.opendev.org/c/openstack/mistral-dashboard/+/800952
- https://review.opendev.org/c/openstack/python-mistralclient/+/800950
- https://pypi.org/project/python-mistralclient
- https://github.com/advisories/GHSA-75hx-6r6j-hw56
Affected packages
PyPI / python-mistralclient
Package
- Name
- python-mistralclient
- View open source insights on deps.dev
- Purl
- pkg:pypi/python-mistralclient
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.3.0
Affected versions
Other
0
0.*
0.0.1
0.0.2
0.0.3
0.0.4
0.1
0.1.1
0.2.0
0.3.0
1.*
1.0.0.0b1
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
2.*
2.0.0
2.1.0
2.1.1
2.1.2
3.*
3.0.0
3.0.1
3.0.2
3.1.0
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.2.0
3.3.0
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.8.0
3.8.1
3.9.0
3.10.0
4.*
4.0.0
4.0.1
4.1.0
4.1.1
4.2.0