CVE-2021-4472
Medium · 6.5CVSS
6.5
EPSS
0.5%
Published
Nov 26, 2025
CISA due date
—
The record
The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | python-mistralclient | 0 | 4.3.0 |
| openSUSE:Tumbleweed | python-mistralclient | 0 | 6.1.0-1.1 |
Related vulnerabilities
- GHSA-75hx-6r6j-hw56 OpenStack's Mistral Client has a local file inclusion vulnerability Same vulnerability
- CVE-2026-88899 knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request… CWE-73
- CVE-2026-53956 Rattler is a library that provides common functionality used within the conda ecosystem. CWE-73
- CVE-2026-79692 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-73
- CVE-2026-86995 n8n is an open source workflow automation platform. CWE-73
- CVE-2026-62804 External control of file name or path in Microsoft Office Word allows an unauthorized… CWE-73
- CVE-2026-81830 The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local… CWE-73
- CVE-2026-79426 An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component… CWE-73