USN-7857-1
keystone vulnerability
No scoreFix available
Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain unauthorized access and escalate privileges.
What each source reports
OSV No score
keystone vulnerability
Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain unauthorized access and escalate privileges.
- Record
USN-7857-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
keystoneUbuntu:24.04:LTS |
before 2:25.0.0-0ubuntu1.1, plus listed versions 2:24.0.0-0ubuntu12:24.0.0+git2024011916.adfa92b4-0ubuntu12:25.0.0~rc1-0ubuntu12:25.0.0-0ubuntu1 |
2:25.0.0-0ubuntu1.1 |
keystoneUbuntu:25.10 |
before 2:28.0.0-0ubuntu1.1, plus listed versions 2:27.0.0-0ubuntu12:27.0.0+git2025080113.e066e18ab-0ubuntu12:28.0.0~rc1-0ubuntu12:28.0.0-0ubuntu1 |
2:28.0.0-0ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7857-1 is a vulnerability with no CVSS score yet in keystone, published November 4, 2025. No source lists public exploit code. Fixed in keystone 2:25.0.0-0ubuntu1.1.