CVE-2026-41283

Red Hat mitigation

Restrict network access to the OpenStack Mistral API to trusted internal networks or hosts. Configure firewall rules to limit inbound connections to the Mistral API port (typically 8989) from untrusted sources, ensuring the API is not exposed to the public internet. Example using `firewall-cmd` (adjust zones and ports as needed): `firewall-cmd --zone=public --remove-port=8989/tcp --permanent` `firewall-cmd --zone=internal --add-port=8989/tcp --permanent` `firewall-cmd --reload` This action may impact legitimate clients requiring external access to the Mistral API. A service reload or restart may be required for firewall changes to take full effect.