What’s Vulnerable › Vulnerabilities

CVE-2021-4472: Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-26 · updated 2026-06-17
• Weakness: CWE-73

Description

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.

Affected products

• Red Hat OpenStack Platform 13 (Queens): all versions
• Red Hat OpenStack Platform 16.2: all versions
• Red Hat OpenStack Platform 17.1: all versions

References

• https://access.redhat.com/security/cve/CVE-2021-4472
• https://bugs.launchpad.net/horizon/+bug/1931558
• https://bugzilla.redhat.com/show_bug.cgi?id=2417321
• https://review.opendev.org/c/openstack/mistral-dashboard/+/800952
• https://review.opendev.org/c/openstack/python-mistralclient/+/800950
• https://lists.debian.org/debian-lts-announce/2025/12/msg00002.html
• https://lists.debian.org/debian-lts-announce/2025/12/msg00003.html

Get alerted when CVE-2021-4472 or the next vulnerability affects your stack