CVE-2026-74248
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By...
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
- Record
CVE-2026-74248- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
EUVDEUVD-2026-58807
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
- Record
EUVD-2026-58807- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3gfv-q5hp-jpcf
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By...
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
- Record
GHSA-3gfv-q5hp-jpcf- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
NVD
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
- Record
CVE-2026-74248- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-74248
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
- Record
DEBIAN-CVE-2026-74248- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-74248
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
- Record
UBUNTU-CVE-2026-74248- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVUSN-8814-1 No score
octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. (CVE-2026-94572)
It was discovered that Octavia did not properly validate L7 policy redirect URL fields in the Amphora provider driver. An authenticated attacker who owns a load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. (CVE-2026-94571)
It was discovered that Octavia incorrectly handled quality of service policy authorization. An authenticated attacker could possibly use this issue to prevent deletion of another project's QoS policy. (CVE-2026-74248)
- Record
USN-8814-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
octaviaDebian:12 |
All versions, plus listed versions 11.0.0-212.0.0-112.0.0-212.0.0-312.0.0-4 Show 39 moreShow less12.0.0~rc1-112.0.0~rc2-113.0.0-113.0.0-213.0.0~rc1-114.0.0-114.0.0-214.0.0-314.0.0-414.0.0~rc1-115.0.0-115.0.0-215.0.0-315.0.0~rc1-115.0.0~rc1-215.0.0~rc1-316.0.0-116.0.0-216.0.0-316.0.0~rc1-116.0.0~rc1-217.0.0-117.0.0-217.0.0-317.0.0-417.0.0-517.0.0~rc1-117.0.0~rc2-117.0.0~rc2-217.0.0~rc2-318.0.0-118.0.0-218.0.0-318.0.0-418.0.0~rc1-118.0.0~rc1-219.0.0-119.0.0~rc1-119.0.0~rc1-2 |
None known |
octaviaDebian:13 |
All versions, plus listed versions 16.0.0-216.0.0-317.0.0-117.0.0-217.0.0-3 Show 15 moreShow less17.0.0-417.0.0-517.0.0~rc1-117.0.0~rc2-117.0.0~rc2-217.0.0~rc2-318.0.0-118.0.0-218.0.0-318.0.0-418.0.0~rc1-118.0.0~rc1-219.0.0-119.0.0~rc1-119.0.0~rc1-2 |
None known |
octaviaDebian:14 |
before 18.0.0-3, plus listed versions 16.0.0-216.0.0-317.0.0-117.0.0-217.0.0-3 Show 10 moreShow less17.0.0-417.0.0-517.0.0~rc1-117.0.0~rc2-117.0.0~rc2-217.0.0~rc2-318.0.0-118.0.0-218.0.0~rc1-118.0.0~rc1-2 |
18.0.0-3 |
octaviaUbuntu:20.04:LTS |
All versions, plus listed versions 5.0.0-0ubuntu16.0.0~b1~git2019121614.45cb1e4e-0ubuntu16.0.0~b2~git2020020614.005cd1e6-0ubuntu16.0.0~b2~git2020020614.005cd1e6-0ubuntu26.0.0~b3~git2020032609.73fca169-0ubuntu1 Show 9 moreShow less6.0.0~b3~git2020041014.771a5d87-0ubuntu16.0.0-0ubuntu0.20.04.16.0.0-0ubuntu0.20.04.26.1.0-0ubuntu16.2.0-0ubuntu16.2.1-0ubuntu16.2.1-0ubuntu26.2.2-0ubuntu16.2.2-0ubuntu1.1 |
None known |
octaviaUbuntu:22.04:LTS |
before 1:10.1.1-0ubuntu1.5, plus listed versions 1:9.0.0-0ubuntu11:9.0.0+git2021120816.ab3c3ef7-0ubuntu11:9.0.1+git2022011217.27e5b27d-0ubuntu11:9.0.1+git2022030314.328ffbab-0ubuntu11:10.0.0-0ubuntu1 Show 6 moreShow less1:10.1.0-0ubuntu11:10.1.1-0ubuntu11:10.1.1-0ubuntu1.11:10.1.1-0ubuntu1.21:10.1.1-0ubuntu1.31:10.1.1-0ubuntu1.4 |
1:10.1.1-0ubuntu1.5 |
octaviaUbuntu:24.04:LTS |
before 1:14.0.0-0ubuntu1.6, plus listed versions 1:13.0.0-0ubuntu11:13.0.0+git2024011917.5750e451-0ubuntu11:14.0.0~rc1-0ubuntu11:14.0.0-0ubuntu11:14.0.0-0ubuntu1.1 Show 4 moreShow less1:14.0.0-0ubuntu1.21:14.0.0-0ubuntu1.31:14.0.0-0ubuntu1.41:14.0.0-0ubuntu1.5 |
1:14.0.0-0ubuntu1.6 |
octaviaUbuntu:26.04:LTS |
before 1:18.0.0-0ubuntu2.1, plus listed versions 1:17.0.0-0ubuntu11:17.0.0+git20260116.e805a93-0ubuntu11:18.0.0~rc1-0ubuntu21:18.0.0-0ubuntu11:18.0.0-0ubuntu2 |
1:18.0.0-0ubuntu2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-74248 is a medium vulnerability (CVSS 4.3) in Openstack Octavia, published August 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 25th percentile. Fixed in octavia 18.0.0-3.