{"id":"CVE-2026-33551","aliases":["DEBIAN-CVE-2026-33551","EUVD-2026-21278","GHSA-4phw-6824-6cfp","PYSEC-2026-202","RHSA-2026:28044","RHSA-2026:39808","RHSA-2026:54757","UBUNTU-CVE-2026-33551","USN-8433-1"],"status":"published","title":"OpenStack Keystone: Restricted application credentials can create EC2 credentials","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00228,"percentile":0.13711,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2026-04-10T00:00:00Z","modified":"2026-10-28T02:30:22Z","fixes":[{"ecosystem":"PyPI","package":"keystone","fixed_in":["26.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"keystone","fixed_in":["2:22.0.2-0+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"keystone","fixed_in":["2:27.0.0-3+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"keystone","fixed_in":["2:29.0.0-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"keystone","fixed_in":["2:21.0.1-0ubuntu2.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"keystone","fixed_in":["2:25.0.0-0ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"keystone","fixed_in":["2:28.0.0-0ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"keystone","fixed_in":["2:29.0.0-0ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.0.0"},{"fixed":"26.1.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:22.0.2-0+deb12u2"}]}],"versions":["2:22.0.0-2","2:22.0.2-0+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:27.0.0-3+deb13u3"}]}],"versions":["2:27.0.0-3","2:27.0.0-3+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:29.0.0-2"}]}],"versions":["2:27.0.0-3","2:28.0.0-1","2:28.0.0-2","2:28.0.0-3","2:28.0.0-4","2:28.0.0-5","2:28.0.0-6","2:28.0.0~rc1-1","2:28.0.0~rc1-2","2:28.0.0~rc1-4","2:29.0.0-1","2:29.0.0~rc1-1","2:29.0.0~rc1-2"]},{"source":"osv","ecosystem":"PyPI","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.0.0"},{"fixed":"26.1.1"}]}],"versions":["14.0.0","14.0.1","14.1.0","14.2.0","15.0.0","15.0.0.0rc1","15.0.0.0rc2","15.0.1","16.0.0","16.0.0.0rc1","16.0.0.0rc2","16.0.1","16.0.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.0.1","18.0.0","18.0.0.0rc1","18.1.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.0.1","20.0.0","20.0.0.0rc1","20.0.1","21.0.0","21.0.0.0rc1","21.0.1","22.0.0","22.0.0.0rc1","22.0.1","22.0.2","23.0.0","23.0.0.0rc1","23.0.1","23.0.2","24.0.0","24.0.0.0rc1","24.1.0","25.0.0","25.0.0.0rc1","26.0.0","26.0.0.0rc1","26.1.0"]},{"source":"osv","ecosystem":"PyPI","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.0.0"},{"fixed":"26.1.1"}]}],"versions":["14.0.0","14.0.1","14.1.0","14.2.0","15.0.0","15.0.0.0rc1","15.0.0.0rc2","15.0.1","16.0.0","16.0.0.0rc1","16.0.0.0rc2","16.0.1","16.0.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.0.1","18.0.0","18.0.0.0rc1","18.1.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.0.1","20.0.0","20.0.0.0rc1","20.0.1","21.0.0","21.0.0.0rc1","21.0.1","22.0.0","22.0.0.0rc1","22.0.1","22.0.2","23.0.0","23.0.0.0rc1","23.0.1","23.0.2","24.0.0","24.0.0.0rc1","24.1.0","25.0.0","25.0.0.0rc1","26.0.0","26.0.0.0rc1","26.1.0"]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27.1-17.1.20231004180819.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27.1-17.1.20231004180819.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27.1-17.1.20231004180819.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27.1-17.1.20231004180819.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27.1-17.1.20231004180819.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27.1-17.1.20231004180819.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.2-17.1.20260529190847.54dd95d.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.2-17.1.20260529190847.54dd95d.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:33.0.0-17.1.20260406141650.1580f6f.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-tempest-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:33.0.0-17.1.20260406141650.1580f6f.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:33.0.0-17.1.20260406141650.1580f6f.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-tempest-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:33.0.0-17.1.20260406141650.1580f6f.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:18.0::el9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:18.0::el9","package":"python3-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.0.3-18.0.20260610133808.9e3dfb4.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"collectd-sensubility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-1.1.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"collectd-sensubility-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-1.1.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-22.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-22.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-22.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.0.3-2.20260616134936.9d699a7.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.0.3-2.20260616134936.9d699a7.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-4.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-4.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-4.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20260317135026.8a24acd.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.5-2.20260512165254.eb6ad61.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.5-2.20260512165254.eb6ad61.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-asn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-asn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-crypto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-eldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-erl_interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-erts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-erts-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-hipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-inets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-mnesia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-os_mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-os_mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-parsetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-public_key","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-runtime_tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-runtime_tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-sasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-syntax_tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"erlang-xmerl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.3.4.18-2.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python-oslo-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.4-2.20260710155333.82281a0.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-oslo-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.4-2.20260710155333.82281a0.el8ost"}]}],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:8.0.0-0ubuntu1","2:9.0.0~b1-0ubuntu1","2:9.0.0~b2-0ubuntu1","2:9.0.0~b3-0ubuntu1","2:9.0.0~rc1-0ubuntu1","2:9.0.0-0ubuntu1","2:9.0.2-0ubuntu1","2:9.0.2-0ubuntu2","2:9.1.0-0ubuntu1","2:9.2.0-0ubuntu1","2:9.3.0-0ubuntu1","2:9.3.0-0ubuntu2","2:9.3.0-0ubuntu3","2:9.3.0-0ubuntu3.1","2:9.3.0-0ubuntu3.2","2:9.3.0-0ubuntu3.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:12.0.0-0ubuntu1","2:13.0.0~b1-0ubuntu1","2:13.0.0~b2-0ubuntu1","2:13.0.0~b3-0ubuntu1","2:13.0.0~rc1-0ubuntu1","2:13.0.0~rc2-0ubuntu1","2:13.0.0-0ubuntu1","2:13.0.1-0ubuntu1","2:13.0.2-0ubuntu1","2:13.0.2-0ubuntu3","2:13.0.4-0ubuntu1","2:13.0.4-0ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:16.0.0-0ubuntu1","2:17.0.0~b1~git2019121613.db81fee63-0ubuntu1","2:17.0.0~b2~git2020020513.99733f172-0ubuntu1","2:17.0.0~b3~git2020032415.9f9040257-0ubuntu1","2:17.0.0~b3~git2020032415.9f9040257-0ubuntu2","2:17.0.0~b3~git2020041013.7bb6314e4-0ubuntu1","2:17.0.0-0ubuntu0.20.04.1","2:17.0.1-0ubuntu1","2:17.0.1-0ubuntu2","2:17.0.1-0ubuntu2+esm1","2:17.0.1-0ubuntu2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.0.1-0ubuntu2.4"}]}],"versions":["2:20.0.0-0ubuntu1","2:20.0.0+git2021120815.2ddf8f321-0ubuntu1","2:20.0.0+git2022011217.771c943ad-0ubuntu1","2:20.0.0+git2022030313.a3fc9e7c3-0ubuntu1","2:21.0.0-0ubuntu1","2:21.0.1-0ubuntu1","2:21.0.1-0ubuntu2","2:21.0.1-0ubuntu2.1","2:21.0.1-0ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:25.0.0-0ubuntu1.4"}]}],"versions":["2:24.0.0-0ubuntu1","2:24.0.0+git2024011916.adfa92b4-0ubuntu1","2:25.0.0~rc1-0ubuntu1","2:25.0.0-0ubuntu1","2:25.0.0-0ubuntu1.1","2:25.0.0-0ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:28.0.0-0ubuntu1.3"}]}],"versions":["2:27.0.0-0ubuntu1","2:27.0.0+git2025080113.e066e18ab-0ubuntu1","2:28.0.0~rc1-0ubuntu1","2:28.0.0-0ubuntu1","2:28.0.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:29.0.0-0ubuntu1.2"}]}],"versions":["2:28.0.0-0ubuntu1","2:28.0.0-0ubuntu2","2:28.0.0+git20260119.61.8a42793e7-0ubuntu1","2:29.0.0~rc1-0ubuntu1","2:29.0.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.0.1-0ubuntu2.4"}]}],"versions":["2:20.0.0-0ubuntu1","2:20.0.0+git2021120815.2ddf8f321-0ubuntu1","2:20.0.0+git2022011217.771c943ad-0ubuntu1","2:20.0.0+git2022030313.a3fc9e7c3-0ubuntu1","2:21.0.0-0ubuntu1","2:21.0.1-0ubuntu1","2:21.0.1-0ubuntu2","2:21.0.1-0ubuntu2.1","2:21.0.1-0ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:25.0.0-0ubuntu1.4"}]}],"versions":["2:24.0.0-0ubuntu1","2:24.0.0+git2024011916.adfa92b4-0ubuntu1","2:25.0.0~rc1-0ubuntu1","2:25.0.0-0ubuntu1","2:25.0.0-0ubuntu1.1","2:25.0.0-0ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:28.0.0-0ubuntu1.3"}]}],"versions":["2:27.0.0-0ubuntu1","2:27.0.0+git2025080113.e066e18ab-0ubuntu1","2:28.0.0~rc1-0ubuntu1","2:28.0.0-0ubuntu1","2:28.0.0-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:29.0.0-0ubuntu1.2"}]}],"versions":["2:28.0.0-0ubuntu1","2:28.0.0-0ubuntu2","2:28.0.0+git20260119.61.8a42793e7-0ubuntu1","2:29.0.0~rc1-0ubuntu1","2:29.0.0-0ubuntu1"]}],"products":[{"vendor":"openstack","product":"keystone"}],"references":[{"url":"https://bugs.launchpad.net/keystone/+bug/2142138","tags":["exploit","Exploit","Issue Tracking","web","report"]},{"url":"https://security.openstack.org/ossa/OSSA-2026-005.html","tags":["Patch","Vendor Advisory","web","fix","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/07/12","tags":["Mailing List","Patch","Third Party Advisory","web","fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33551","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2026-202.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4phw-6824-6cfp","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33551.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-33551","tags":["advisory"]},{"url":"https://github.com/openstack/keystone","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28044","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2415344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451037","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28044.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-65073","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-65073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65073","tags":["advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2025-002.html","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2025/11/04/2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33551","tags":["advisory","report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/07/12","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43001","tags":["advisory"]},{"url":"https://bugs.launchpad.net/keystone/+bug/2149775","tags":["article"]},{"url":"https://review.opendev.org/c/openstack/keystone/+/985804","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39808","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458472","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39808.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40683","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40683","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40683","tags":["advisory"]},{"url":"https://bugs.launchpad.net/keystone/+bug/2121152","tags":["article"]},{"url":"https://bugs.launchpad.net/keystone/+bug/2141713","tags":["article"]},{"url":"https://review.opendev.org/958205","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/14/9","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54757","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2440368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484835","tags":["report"]},{"url":"https://issues.redhat.com/browse/OSPRH-20808","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54757.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61726","tags":["advisory"]},{"url":"https://go.dev/cl/736712","tags":["article"]},{"url":"https://go.dev/issue/77101","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4341","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61729","tags":["advisory"]},{"url":"https://go.dev/cl/725920","tags":["article"]},{"url":"https://go.dev/issue/76445","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/8FJoBkPddm4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68121","tags":["advisory"]},{"url":"https://go.dev/cl/737700","tags":["article"]},{"url":"https://go.dev/issue/77217","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/K09ubi9FQFk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4337","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23490","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23490","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23490","tags":["advisory"]},{"url":"https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970","tags":["article"]},{"url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2","tags":["article"]},{"url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24708","tags":["advisory"]},{"url":"https://bugs.launchpad.net/nova/+bug/2137507","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25679","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25679","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25679","tags":["advisory"]},{"url":"https://go.dev/cl/752180","tags":["article"]},{"url":"https://go.dev/issue/77578","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4601","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27137","tags":["advisory"]},{"url":"https://go.dev/cl/752182","tags":["article"]},{"url":"https://go.dev/issue/77952","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27145","tags":["advisory"]},{"url":"https://go.dev/cl/783621","tags":["article"]},{"url":"https://go.dev/issue/79694","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5037","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32280","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32280","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32280","tags":["advisory"]},{"url":"https://go.dev/cl/758320","tags":["article"]},{"url":"https://go.dev/issue/78282","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4947","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32281","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32281","tags":["advisory"]},{"url":"https://go.dev/cl/758061","tags":["article"]},{"url":"https://go.dev/issue/78281","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4946","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32282","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32282","tags":["advisory"]},{"url":"https://go.dev/cl/763761","tags":["article"]},{"url":"https://go.dev/issue/78293","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4864","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32283","tags":["advisory"]},{"url":"https://go.dev/cl/763767","tags":["article"]},{"url":"https://go.dev/issue/78334","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4870","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33186","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33186","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33186","tags":["advisory"]},{"url":"https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33413","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33413","tags":["advisory"]},{"url":"https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33810","tags":["advisory"]},{"url":"https://go.dev/cl/763763","tags":["article"]},{"url":"https://go.dev/issue/78332","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4866","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33811","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33811","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33811","tags":["advisory"]},{"url":"https://go.dev/cl/767860","tags":["article"]},{"url":"https://go.dev/issue/78803","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/qcCIEXso47M","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34881","tags":["advisory"]},{"url":"https://bugs.launchpad.net/glance/+bug/2138602","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39821","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39821","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39821","tags":["advisory"]},{"url":"https://go.dev/cl/767220","tags":["article"]},{"url":"https://go.dev/issue/78760","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5026","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42789","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42789","tags":["advisory"]},{"url":"https://cna.erlef.org/cves/CVE-2026-42789.html","tags":["article"]},{"url":"https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db","tags":["article"]},{"url":"https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd","tags":["article"]},{"url":"https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq","tags":["article"]},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-42789","tags":["article"]},{"url":"https://www.erlang.org/doc/system/versions.html#order-of-versions","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42790","tags":["advisory"]},{"url":"https://cna.erlef.org/cves/CVE-2026-42790.html","tags":["article"]},{"url":"https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759","tags":["article"]},{"url":"https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a","tags":["article"]},{"url":"https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457","tags":["article"]},{"url":"https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447","tags":["article"]},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-42790","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44393","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44393","tags":["advisory"]},{"url":"https://bugs.launchpad.net/oslo.messaging/+bug/2150316","tags":["article"]},{"url":"https://wiki.openstack.org/wiki/OSSN/OSSN-0096","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2026-33551","tags":["report"]},{"url":"https://launchpad.net/bugs/2142138","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8433-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-40683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-44394","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-33551","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T00:00:00Z","modified":"2026-04-10T13:50:43.389Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:20:08.009733Z"}],"euvd":[{"id":"EUVD-2026-21278","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T00:00:00Z","modified":"2026-04-10T13:50:43Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T19:24:30.341772Z"}],"ghsa":[{"id":"GHSA-4phw-6824-6cfp","title":"OpenStack Keystone: Restricted application credentials can create EC2 credentials","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T03:31:10Z","modified":"2026-06-09T11:55:47Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:40:23.739691Z"}],"nvd":[{"id":"CVE-2026-33551","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T03:16:02.723Z","modified":"2026-10-26T22:10:00.163Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:12:13.902911Z"}],"osv":[{"id":"CVE-2026-33551","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T00:00:00Z","modified":"2026-10-28T02:30:22.621148861Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:45:01.896044Z"},{"id":"DEBIAN-CVE-2026-33551","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T03:16:02.723Z","modified":"2026-10-27T09:47:39.909792223Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:54.587575Z"},{"id":"GHSA-4phw-6824-6cfp","title":"OpenStack Keystone: Restricted application credentials can create EC2 credentials","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T03:31:10Z","modified":"2026-06-09T12:00:12.484964469Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:46:37.148947Z"},{"id":"PYSEC-2026-202","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T03:16:02.723Z","modified":"2026-06-10T17:01:03.906136175Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.537808Z"},{"id":"RHSA-2026:28044","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update","status":"published","published":"2026-06-23T10:08:20Z","modified":"2026-09-26T10:06:57Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:39808","title":"Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update","status":"published","published":"2026-07-16T10:10:34Z","modified":"2026-09-26T10:08:22Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:54757","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory","status":"published","published":"2026-08-14T10:17:08Z","modified":"2026-10-20T10:11:14Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"UBUNTU-CVE-2026-33551","description":"An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.","status":"published","published":"2026-04-10T03:16:00Z","modified":"2026-09-30T18:23:48.729957657Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:16.036833Z"},{"id":"USN-8433-1","title":"keystone vulnerabilities","description":"It was discovered that OpenStack Keystone allowed restricted application\ncredentials to create EC2 credentials. An authenticated attacker with only\na reader role could possibly use this issue to bypass the role restrictions\nimposed on the application credential. (CVE-2026-33551)\n\nIt was discovered that the OpenStack Keystone LDAP identity backend did\nnot correctly convert the user enabled attribute to a boolean value.\nAn attacker could possibly use this issue to authenticate as a user disabled\nin LDAP. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,\nand Ubuntu 25.10. (CVE-2026-40683)\n\nIt was discovered that OpenStack Keystone's application credential\nauthentication plugin did not verify that the user supplied in an\nauthentication request matched the credential owner. An authenticated\nattacker could possibly impersonate another user and gain access to their\ntokens and credentials. (CVE-2026-42998)\n\nIt was discovered that OpenStack Keystone's RBAC policy enforcer\nunconditionally merged the raw JSON request body into the policy enforcement\ndictionary, overwriting trusted target data. An authenticated attacker could\npossibly use this issue to inject arbitrary policy attributes to bypass RBAC\nchecks. (CVE-2026-42999)\n\nIt was discovered that OpenStack Keystone allowed an attacker with the member\nrole to escalate privileges to admin by chaining application credential\nimpersonation with Keystone trusts. An attacker could possibly use this\nissue to create a persistent trust delegating the victim's admin role to\nthemselves. (CVE-2026-43000)\n\nIt was discovered that OpenStack Keystone did not validate that the project_id\nfor an EC2 credential matched the project of the authenticating application\ncredential. An attacker with valid credentials for one project could possibly\nuse this issue to create EC2 credentials targeting a different project.\n(CVE-2026-43001)\n\nIt was discovered that OpenStack Keystone's federated token rescoping mechanism\ndid not propagate the original token's expiry to the newly issued token. A\nremote attacker could possibly use this issue to maintain access indefinitely by\nrepeatedly rescoping tokens before expiry. (CVE-2026-44394)","status":"published","published":"2026-06-16T13:45:21Z","modified":"2026-06-30T18:17:30.451674908Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}