CVE-2025-65073

OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.

7.5 HighFix available

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: High
Availability: None

Exploit likelihood

0.24%Up 0.2 points since Nov 17, 2025

What each source reports

CVE List Score used 7.5

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: CVE-2025-65073
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Weakness: CWE-863
Updated: 2026-11-02

EUVDEUVD-2025-197772 7.5

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: EUVD-2025-197772
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-hcqg-5g63-7j9h 7.5

OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: GHSA-hcqg-5g63-7j9h
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Weakness: CWE-863
Updated: 2026-11-02

NVD 7.5

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: CVE-2025-65073
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Weakness: CWE-863
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-65073 7.5

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: DEBIAN-CVE-2025-65073
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Updated: 2026-11-02

OSVGHSA-hcqg-5g63-7j9h 7.5

OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: GHSA-hcqg-5g63-7j9h
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Weakness: CWE-863
Updated: 2026-11-02

Show 6 moreShow less

OSVPYSEC-2026-1490 7.5

OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: PYSEC-2026-1490
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2026:1958 7.5

Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update

Record: RHSA-2026:1958
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2026:28044 8.0

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update

Record: RHSA-2026:28044
CVSS 3.1: 8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54757 9.1

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory

Record: RHSA-2026:54757
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-65073 7.5

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

Record: UBUNTU-CVE-2025-65073
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Updated: 2026-11-02

OSVUSN-7926-1 No score

keystone vulnerabilities

Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain unauthorized access and escalate privileges. (CVE-2025-65073)

It was discovered that OpenStack Keystone only validated the first 72 bytes of an application secret. An attacker could possibly use this issue to bypass password complexity. (CVE-2021-3563)

It was discovered that OpenStack Keystone had a time lag before a token should be revoked by the security policy. A remote administrator could use this issue to maintain access for longer than expected. (CVE-2022-2447)

Record: USN-7926-1
Updated: 2026-11-02

Affected products

openstack keystone

Affected packages

Affected packages
Package	Affected	Fixed
`keystone` PyPI	before 26.0.1	26.0.1
`keystone` PyPI	27.0.0.0rc1 to 27.0.0.0rc1	27.0.0
`keystone` PyPI	28.0.0.0rc1 to 28.0.0.0rc1	28.0.0
`keystone` Debian:12	before 2:22.0.2-0+deb12u1, plus listed versions 2:22.0.0-2	2:22.0.2-0+deb12u1
`keystone` Debian:13	before 2:27.0.0-3+deb13u1, plus listed versions 2:27.0.0-3	2:27.0.0-3+deb13u1
`keystone` Debian:14	before 2:28.0.0-2, plus listed versions 2:27.0.0-32:28.0.0-12:28.0.0~rc1-12:28.0.0~rc1-22:28.0.0~rc1-4	2:28.0.0-2
`keystone` Debian:11	before 2:18.1.0-1+deb11u2, plus listed versions 2:18.0.0-32:18.0.0-3+deb11u1	2:18.1.0-1+deb11u2
`keystone` PyPI	before 26.0.1, plus listed versions 12.0.212.0.313.0.213.0.313.0.4 Show 45 moreShow less 14.0.014.0.114.1.014.2.015.0.015.0.0.0rc115.0.0.0rc215.0.116.0.016.0.0.0rc116.0.0.0rc216.0.116.0.217.0.017.0.0.0rc117.0.0.0rc217.0.118.0.018.0.0.0rc118.1.019.0.019.0.0.0rc119.0.0.0rc219.0.120.0.020.0.0.0rc120.0.121.0.021.0.0.0rc121.0.122.0.022.0.0.0rc122.0.122.0.223.0.023.0.0.0rc123.0.123.0.224.0.024.0.0.0rc124.1.025.0.025.0.0.0rc126.0.026.0.0.0rc1	26.0.1
`keystone` PyPI	27.0.0.0rc1 up to 27.0.0	27.0.0
`keystone` PyPI	28.0.0.0rc1 up to 28.0.0	28.0.0

Show 94 moreShow less

Affected packages
Package	Affected	Fixed
`keystone` PyPI	before 26.0.1, 27.0.0.0rc1 up to 27.0.0, 28.0.0.0rc1 up to 28.0.0, plus listed versions 12.0.212.0.313.0.213.0.313.0.4 Show 45 moreShow less 14.0.014.0.114.1.014.2.015.0.015.0.0.0rc115.0.0.0rc215.0.116.0.016.0.0.0rc116.0.0.0rc216.0.116.0.217.0.017.0.0.0rc117.0.0.0rc217.0.118.0.018.0.0.0rc118.1.019.0.019.0.0.0rc119.0.0.0rc219.0.120.0.020.0.0.0rc120.0.121.0.021.0.0.0rc121.0.122.0.022.0.0.0rc122.0.122.0.223.0.023.0.0.0rc123.0.123.0.224.0.024.0.0.0rc124.1.025.0.025.0.0.0rc126.0.026.0.0.0rc1	26.0.127.0.028.0.0
`openstack-keystone` Red Hat:openstack:18.0::el9	before 1:23.0.3-18.0.20241202141842.9e3dfb4.el9ost	1:23.0.3-18.0.20241202141842.9e3dfb4.el9ost
`python3-keystone` Red Hat:openstack:18.0::el9	before 1:23.0.3-18.0.20241202141842.9e3dfb4.el9ost	1:23.0.3-18.0.20241202141842.9e3dfb4.el9ost
`openstack-swift` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 0:2.27.1-17.1.20231004180819.el9ost	0:2.27.1-17.1.20231004180819.el9ost
`openstack-swift-account` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 0:2.27.1-17.1.20231004180819.el9ost	0:2.27.1-17.1.20231004180819.el9ost
`openstack-swift-container` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 0:2.27.1-17.1.20231004180819.el9ost	0:2.27.1-17.1.20231004180819.el9ost
`openstack-swift-object` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 0:2.27.1-17.1.20231004180819.el9ost	0:2.27.1-17.1.20231004180819.el9ost
`openstack-swift-proxy` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 0:2.27.1-17.1.20231004180819.el9ost	0:2.27.1-17.1.20231004180819.el9ost
`python3-swift` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 0:2.27.1-17.1.20231004180819.el9ost	0:2.27.1-17.1.20231004180819.el9ost
`openstack-keystone` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 1:19.0.2-17.1.20260529190847.54dd95d.el9ost	1:19.0.2-17.1.20260529190847.54dd95d.el9ost
`python3-keystone` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 1:19.0.2-17.1.20260529190847.54dd95d.el9ost	1:19.0.2-17.1.20260529190847.54dd95d.el9ost
`openstack-tempest` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 1:33.0.0-17.1.20260406141650.1580f6f.el9ost	1:33.0.0-17.1.20260406141650.1580f6f.el9ost
`openstack-tempest-all` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 1:33.0.0-17.1.20260406141650.1580f6f.el9ost	1:33.0.0-17.1.20260406141650.1580f6f.el9ost
`python3-tempest` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 1:33.0.0-17.1.20260406141650.1580f6f.el9ost	1:33.0.0-17.1.20260406141650.1580f6f.el9ost
`python3-tempest-tests` Red Hat:openstack:17.1::el9 From an advisory covering 3 CVEs	before 1:33.0.0-17.1.20260406141650.1580f6f.el9ost	1:33.0.0-17.1.20260406141650.1580f6f.el9ost
`collectd-sensubility` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:0.2.1-1.1.el8ost	0:0.2.1-1.1.el8ost
`collectd-sensubility-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:0.2.1-1.1.el8ost	0:0.2.1-1.1.el8ost
`etcd` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:3.3.23-22.el8ost	0:3.3.23-22.el8ost
`etcd-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:3.3.23-22.el8ost	0:3.3.23-22.el8ost
`etcd-debugsource` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:3.3.23-22.el8ost	0:3.3.23-22.el8ost
`openstack-keystone` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:16.0.3-2.20260616134936.9d699a7.el8ost	1:16.0.3-2.20260616134936.9d699a7.el8ost
`python3-keystone` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:16.0.3-2.20260616134936.9d699a7.el8ost	1:16.0.3-2.20260616134936.9d699a7.el8ost
`python-pyasn1` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:0.4.6-4.el8ost	0:0.4.6-4.el8ost
`python3-pyasn1` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:0.4.6-4.el8ost	0:0.4.6-4.el8ost
`python3-pyasn1-modules` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:0.4.6-4.el8ost	0:0.4.6-4.el8ost
`openstack-nova` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-api` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-common` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-compute` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-conductor` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-console` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-migration` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-novncproxy` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-scheduler` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-serialproxy` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-nova-spicehtml5proxy` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`python3-nova` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:20.6.2-2.20260317135026.8a24acd.el8ost	1:20.6.2-2.20260317135026.8a24acd.el8ost
`openstack-glance` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:19.0.5-2.20260512165254.eb6ad61.el8ost	1:19.0.5-2.20260512165254.eb6ad61.el8ost
`python3-glance` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 1:19.0.5-2.20260512165254.eb6ad61.el8ost	1:19.0.5-2.20260512165254.eb6ad61.el8ost
`erlang` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-asn1` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-asn1-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-compiler` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-crypto` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-crypto-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-debugsource` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-eldap` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-erl_interface-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-erts` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-erts-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-hipe` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-inets` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-kernel` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-mnesia` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-odbc-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-os_mon` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-os_mon-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-parsetools` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-public_key` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-runtime_tools` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-runtime_tools-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-sasl` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-snmp` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-ssl` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-stdlib` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-syntax_tools` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-tools` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-tools-debuginfo` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`erlang-xmerl` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:23.3.4.18-2.el8ost	0:23.3.4.18-2.el8ost
`python-oslo-messaging` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:10.2.4-2.20260710155333.82281a0.el8ost	0:10.2.4-2.20260710155333.82281a0.el8ost
`python3-oslo-messaging` Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs	before 0:10.2.4-2.20260710155333.82281a0.el8ost	0:10.2.4-2.20260710155333.82281a0.el8ost
`heat` Ubuntu:16.04:LTS	All versions, plus listed versions 1:5.0.0-0ubuntu11:6.0.0~b1-0ubuntu11:6.0.0~b2-0ubuntu11:6.0.0~b2-0ubuntu21:6.0.0~b3-0ubuntu1 Show 7 moreShow less 1:6.0.0~rc1-0ubuntu11:6.0.0-0ubuntu11:6.0.0-0ubuntu1.11:6.1.0-0ubuntu11:6.1.1-0ubuntu11:6.1.2-0ubuntu11:6.1.2-0ubuntu1.1	None known
`keystone` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 2:8.0.0-0ubuntu12:9.0.0~b1-0ubuntu12:9.0.0~b2-0ubuntu12:9.0.0~b3-0ubuntu12:9.0.0~rc1-0ubuntu1 Show 11 moreShow less 2:9.0.0-0ubuntu12:9.0.2-0ubuntu12:9.0.2-0ubuntu22:9.1.0-0ubuntu12:9.2.0-0ubuntu12:9.3.0-0ubuntu12:9.3.0-0ubuntu22:9.3.0-0ubuntu32:9.3.0-0ubuntu3.12:9.3.0-0ubuntu3.22:9.3.0-0ubuntu3.2+esm2	None known
`swift` Ubuntu:16.04:LTS	All versions, plus listed versions 2.5.0-0ubuntu12.7.0-0ubuntu22.7.0-0ubuntu2.12.7.1-0ubuntu12.7.1-0ubuntu2	None known
`heat` Ubuntu:18.04:LTS	All versions, plus listed versions 1:9.0.0-0ubuntu11:10.0.0~b1-0ubuntu11:10.0.0~b2-0ubuntu11:10.0.0-0ubuntu1.11:10.0.1-0ubuntu11:10.0.1-0ubuntu21:10.0.2-0ubuntu11:10.0.2-0ubuntu1.1	None known
`keystone` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2:12.0.0-0ubuntu12:13.0.0~b1-0ubuntu12:13.0.0~b2-0ubuntu12:13.0.0~b3-0ubuntu12:13.0.0~rc1-0ubuntu1 Show 7 moreShow less 2:13.0.0~rc2-0ubuntu12:13.0.0-0ubuntu12:13.0.1-0ubuntu12:13.0.2-0ubuntu12:13.0.2-0ubuntu32:13.0.4-0ubuntu12:13.0.4-0ubuntu1+esm1	None known
`swift` Ubuntu:18.04:LTS	All versions, plus listed versions 2.15.1-0ubuntu32.16.0-0ubuntu12.16.0-0ubuntu22.17.0-0ubuntu12.17.1-0ubuntu1	None known
`heat` Ubuntu:20.04:LTS	All versions, plus listed versions 1:13.0.0-0ubuntu11:14.0.0~b1~git2019121613.7b606461e-0ubuntu11:14.0.0~b2~git2020021413.94bdcd8c9-0ubuntu21:14.0.0~b3~git2020032414.d8354d908-0ubuntu11:14.0.0~b3~git2020041012.2ef9f4bf3-0ubuntu1 Show 5 moreShow less 1:14.0.0-0ubuntu0.20.04.11:14.1.0-0ubuntu11:14.2.0-0ubuntu11:14.2.0-0ubuntu1.11:14.2.0-0ubuntu2	None known
`keystone` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 2:16.0.0-0ubuntu12:17.0.0~b1~git2019121613.db81fee63-0ubuntu12:17.0.0~b2~git2020020513.99733f172-0ubuntu12:17.0.0~b3~git2020032415.9f9040257-0ubuntu12:17.0.0~b3~git2020032415.9f9040257-0ubuntu2 Show 6 moreShow less 2:17.0.0~b3~git2020041013.7bb6314e4-0ubuntu12:17.0.0-0ubuntu0.20.04.12:17.0.1-0ubuntu12:17.0.1-0ubuntu22:17.0.1-0ubuntu2+esm12:17.0.1-0ubuntu2+esm2	None known
`swift` Ubuntu:20.04:LTS	All versions, plus listed versions 2.23.0-0ubuntu12.23.1-0ubuntu12.24.0~git2019121715.e890b0f0f-0ubuntu12.24.0-0ubuntu12.24.1~git2020032711.712bf3c9f-0ubuntu2 Show 5 moreShow less 2.24.1~git2020041316.a495f1e32-0ubuntu12.25.0-0ubuntu0.20.04.12.25.1-0ubuntu12.25.2-0ubuntu12.25.2-0ubuntu1.1	None known
`heat` Ubuntu:22.04:LTS	All versions, plus listed versions 1:17.0.0-0ubuntu11:17.0.0+git2021120816.fe8fba8c9-0ubuntu21:17.0.0+git2022011216.9af3af156-0ubuntu11:17.0.0+git2022011216.9af3af156-0ubuntu31:17.0.1+git2022030311.968969b99-0ubuntu1 Show 8 moreShow less 1:18.0.0-0ubuntu11:18.0.0-0ubuntu1.11:18.0.0-0ubuntu1.21:18.0.1-0ubuntu11:18.0.1-0ubuntu1.11:18.0.1-0ubuntu1.21:18.0.1-0ubuntu1.31:18.0.1-0ubuntu1.4	None known
`keystone` Ubuntu:22.04:LTS	before 2:21.0.1-0ubuntu2.1, plus listed versions 2:20.0.0-0ubuntu12:20.0.0+git2021120815.2ddf8f321-0ubuntu12:20.0.0+git2022011217.771c943ad-0ubuntu12:20.0.0+git2022030313.a3fc9e7c3-0ubuntu12:21.0.0-0ubuntu12:21.0.1-0ubuntu12:21.0.1-0ubuntu2	2:21.0.1-0ubuntu2.1
`swift` Ubuntu:22.04:LTS	before 2.29.2-0ubuntu1.1, plus listed versions 2.28.0+git2021090911.5d52afbe4-0ubuntu12.28.0+git2021120815.1859f2e16-0ubuntu12.28.0+git2021121320.876377435-0ubuntu12.28.0+git2022011309.32da73f5c-0ubuntu12.29.0+git2022030314.3ff3076ce-0ubuntu12.29.0+git2022030314.3ff3076ce-0ubuntu22.29.1-0ubuntu12.29.2-0ubuntu1	2.29.2-0ubuntu1.1
`heat` Ubuntu:24.04:LTS	All versions, plus listed versions 1:21.0.0-0ubuntu21:21.0.0-0ubuntu31:21.0.0+git2024011916.2df46d4c-0ubuntu11:22.0.0~rc1-0ubuntu11:22.0.0-0ubuntu1 Show 6 moreShow less 1:22.0.0-0ubuntu21:22.0.1-0ubuntu11:22.0.1-0ubuntu1.11:22.0.1-0ubuntu1.21:22.0.1-0ubuntu1.31:22.0.1-0ubuntu1.4	None known
`keystone` Ubuntu:24.04:LTS	before 2:25.0.0-0ubuntu1.1, plus listed versions 2:24.0.0-0ubuntu12:24.0.0+git2024011916.adfa92b4-0ubuntu12:25.0.0~rc1-0ubuntu12:25.0.0-0ubuntu1	2:25.0.0-0ubuntu1.1
`swift` Ubuntu:24.04:LTS	before 2.33.0-0ubuntu1.1, plus listed versions 2.32.0+git2023090714.8ce961ed-0ubuntu12.32.0+git2024021508.3aba22fd-0ubuntu12.32.0+git2024030809.4135133a-0ubuntu12.33.0-0ubuntu1	2.33.0-0ubuntu1.1
`heat` Ubuntu:25.10	All versions, plus listed versions 1:24.0.0-0ubuntu11:25.0.0-0ubuntu1	None known
`keystone` Ubuntu:25.10	before 2:28.0.0-0ubuntu1.1, plus listed versions 2:27.0.0-0ubuntu12:27.0.0+git2025080113.e066e18ab-0ubuntu12:28.0.0~rc1-0ubuntu12:28.0.0-0ubuntu1	2:28.0.0-0ubuntu1.1
`swift` Ubuntu:25.10	before 2.36.0-0ubuntu1.1, plus listed versions 2.35.0-0ubuntu12.35.0+git2025070714.1428eb3b5-0ubuntu12.36.0-0ubuntu1	2.36.0-0ubuntu1.1
`heat` Ubuntu:26.10	All versions, plus listed versions 1:26.0.0-0ubuntu11:26.0.0-0ubuntu21:26.0.0-0ubuntu31:26.0.0+git20260814.107.c4a566c-0ubuntu11:27.0.0~rc1-0ubuntu11:27.0.0-0ubuntu1	None known
`heat` Ubuntu:26.04:LTS	All versions, plus listed versions 1:25.0.0-0ubuntu11:25.0.0+git20260124.b471f4a-0ubuntu11:26.0.0~rc1-0ubuntu11:26.0.0-0ubuntu11:26.0.0-0ubuntu1.11:26.0.0-0ubuntu1.2	None known
`keystone` Ubuntu:26.04:LTS	before 2:28.0.0-0ubuntu2, plus listed versions 2:28.0.0-0ubuntu1	2:28.0.0-0ubuntu2
`keystone` Ubuntu:22.04:LTS From an advisory covering 3 CVEs	before 2:21.0.1-0ubuntu2.1, plus listed versions 2:20.0.0-0ubuntu12:20.0.0+git2021120815.2ddf8f321-0ubuntu12:20.0.0+git2022011217.771c943ad-0ubuntu12:20.0.0+git2022030313.a3fc9e7c3-0ubuntu12:21.0.0-0ubuntu12:21.0.1-0ubuntu12:21.0.1-0ubuntu2	2:21.0.1-0ubuntu2.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-65073 is a high vulnerability (CVSS 7.5) in Openstack Keystone, published November 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in keystone 26.0.1.

References

Show 182 moreShow less