CVE-2026-43002
OpenStack Horizon has Incorrect Behavior Order
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
CVE-2026-43002- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-696
- Updated
- 2026-11-02
EUVDEUVD-2026-27406
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
EUVD-2026-27406- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vxvf-xvm3-p8j5
OpenStack Horizon has Incorrect Behavior Order
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
GHSA-vxvf-xvm3-p8j5- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-696
- Updated
- 2026-11-02
NVD
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
CVE-2026-43002- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-696
- Updated
- 2026-11-02
OSV
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
CVE-2026-43002- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-696
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-43002
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
DEBIAN-CVE-2026-43002- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVGHSA-vxvf-xvm3-p8j5
OpenStack Horizon has Incorrect Behavior Order
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
GHSA-vxvf-xvm3-p8j5- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-696
- Updated
- 2026-11-02
OSVPYSEC-2026-2520
OpenStack Horizon has Incorrect Behavior Order
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
PYSEC-2026-2520- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-43002
An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.
- Record
UBUNTU-CVE-2026-43002- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
horizonPyPI |
25.6 up to 25.7.3 | 25.7.3 |
horizonDebian:14 |
before 3:25.7.3-1, plus listed versions 3:25.3.0-33:25.5.0-43:25.5.1-13:25.5.1-23:25.5.1-3 Show 6 moreShow less3:25.6.0-13:25.6.0-23:25.7.0-13:25.7.0-23:25.7.1-13:25.7.2-1 |
3:25.7.3-1 |
horizonPyPI |
25.6 up to 25.7.3, plus listed versions 25.6.025.7.025.7.125.7.2 |
25.7.3 |
horizonUbuntu:16.04:LTS |
All versions, plus listed versions 2:8.0.0-0ubuntu22:9.0.0~b1-0ubuntu12:9.0.0~b1-0ubuntu22:9.0.0~b2-0ubuntu12:9.0.0~b3-0ubuntu1 Show 12 moreShow less2:9.0.0~rc1-0ubuntu12:9.0.0-0ubuntu12:9.0.0-0ubuntu22:9.0.0-0ubuntu2.16.04.12:9.0.1-0ubuntu22:9.1.0-0ubuntu12:9.1.1-0ubuntu12:9.1.2-0ubuntu12:9.1.2-0ubuntu22:9.1.2-0ubuntu32:9.1.2-0ubuntu52:9.1.2-0ubuntu5.2 |
None known |
horizonUbuntu:18.04:LTS |
All versions, plus listed versions 3:12.0.0-0ubuntu2.13:12.0.0-0ubuntu33:13.0.0~b1-0ubuntu13:13.0.0~b1-0ubuntu23:13.0.0-0ubuntu1 Show 12 moreShow less3:13.0.0-0ubuntu1.13:13.0.1-0ubuntu13:13.0.1-0ubuntu23:13.0.1-0ubuntu33:13.0.1-0ubuntu43:13.0.1-0ubuntu53:13.0.1-0ubuntu63:13.0.2-0ubuntu13:13.0.2-0ubuntu23:13.0.2-0ubuntu33:13.0.3-0ubuntu13:13.0.3-0ubuntu2 |
None known |
horizonUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3:16.0.0-0ubuntu13:17.0.0~b1~git2019121712.f7313b74c-0ubuntu13:18.0.1~git2020021409.bb959361b-0ubuntu23:18.0.1~git2020021409.bb959361b-0ubuntu33:18.2.1~git2020032709.2c4470272-0ubuntu1 Show 14 moreShow less3:18.2.1~git2020041013.754804667-0ubuntu13:18.2.1~git2020041013.754804667-0ubuntu23:18.2.1~git2020041013.754804667-0ubuntu33:18.3.2-0ubuntu0.20.04.13:18.3.2-0ubuntu0.20.04.23:18.3.2-0ubuntu0.20.04.43:18.3.3-0ubuntu13:18.3.4-0ubuntu13:18.3.5-0ubuntu13:18.3.5-0ubuntu23:18.3.5-0ubuntu2.13:18.3.5-0ubuntu2.23:18.3.5-0ubuntu2.33:18.3.5-0ubuntu2.3+esm1 |
None known |
horizonUbuntu:22.04:LTS |
All versions, plus listed versions 4:20.1.0-0ubuntu14:20.2.0+git2021120911.fc1012628-0ubuntu14:20.2.0+git2022011216.8fe5bbc8d-0ubuntu14:21.0.0+git2022030313.dd9e4c82b-0ubuntu24:22.1.0-0ubuntu1 Show 4 moreShow less4:22.1.0-0ubuntu24:22.1.0-0ubuntu2.14:22.1.1-0ubuntu14:22.1.1-0ubuntu1.1 |
None known |
horizonUbuntu:24.04:LTS |
All versions, plus listed versions 4:23.3.0-0ubuntu14:23.3.0-0ubuntu24:23.4.0+git2024011916.a77818d7-0ubuntu14:24.0.0-0ubuntu14:24.0.0-0ubuntu1.1 Show 4 moreShow less4:24.0.0-0ubuntu1.24:24.0.0-0ubuntu1.34:24.0.1-0ubuntu0.24.04.14:24.0.1-0ubuntu0.24.04.2 |
None known |
horizonUbuntu:25.10 |
All versions, plus listed versions 4:25.3.0-0ubuntu14:25.4.0+git2025070714.33cbc0c53-0ubuntu24:25.5.1-0ubuntu14:25.5.1-0ubuntu1.1 |
None known |
horizonUbuntu:26.10 |
All versions, plus listed versions 4:25.7.1-0ubuntu14:26.0.0-0ubuntu14:27.0.0-0ubuntu1 |
None known |
horizonUbuntu:26.04:LTS |
All versions, plus listed versions 4:25.5.1-0ubuntu14:25.5.1-0ubuntu24:25.5.1+git2026012819.479212220-0ubuntu14:25.7.1-0ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-43002 is a medium vulnerability (CVSS 5.3) in Openstack Horizon, published May 5, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in horizon 25.7.3.