Skip to contentOpenstack vulnerabilities
Newest
- openstack novaOpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraintsCVE-2026-46448Fix available5.4 Medium
- openstack ironicOpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume propertiesCVE-2026-54421Fix available6.8 Medium
- openstack ironic, red hat openshift container platform 4, openstack platform 16.2 +2 more +4 moreOpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service CrashCVE-2026-50589Fix available5.3 Medium
- openstack neutronOpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networksCVE-2026-50266Fix available2.2 Low
- keystonejs keystonekeystonejs keystone GraphQL API Endpoint output-field.ts resource consumptionCVE-2026-108025.3 Medium
- openstack ironicOpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO imageCVE-2026-48681Fix available5.9 Medium
- openstack ironicOpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read...CVE-2026-44917Fix available4.9 Medium
- openstack mistral, red hat openstack platform 16.2 +1 moreOpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposedCVE-2026-41283Fix available9.9 Critical
- openstack ironicOpenStack Ironic allows Boot Script InjectionCVE-2026-46447Fix available5.8 Medium
- openstack neutronOpenStack Neutron has an Incorrect Authorization issueCVE-2026-49299Fix available5.3 Medium
- openstack keystoneOpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued tokenCVE-2026-44394Fix available6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Incorrect Authorization issueCVE-2026-43000Fix available6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Authorization BypassCVE-2026-42999Fix available6.0 Medium
- openstack keystoneOpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credentialCVE-2026-42998Fix available6.0 Medium
- openstack swiftOpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request bodyCVE-2026-49017Fix available7.1 High
- openstack ironicOpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block DevicesCVE-2026-44919Fix available4.3 Medium
- openstack ironicIn OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.CVE-2026-44916Fix available3.0 Low
- openstack cyborgOpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layerCVE-2026-40214Fix available6.3 Medium
- openstack cyborgOpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpointsCVE-2026-40213Fix available7.4 High
- openstack horizonOpenStack Horizon has Incorrect Behavior OrderCVE-2026-43002Fix available5.3 Medium
- openstack ironic, red hat openshift container platform 4, openstack platform 16.2 +2 more +4 moreOpenStack Ironic has an Incorrect Resource Transfer Between SpheresCVE-2026-42997Fix available7.7 High
- openstack ironic-python-agent, ironic python agent, red hat openshift container platform 4 +4 more +6 moreOpenStack Ironic Python Agent Includes Functionality from Untrusted Control SphereCVE-2026-43003Fix available8.0 High
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +3 more +5 moreOpenStack Keystone has an Incorrect Authorization IssueCVE-2026-43001Fix available7.9 High
- openstack ironicOpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control SphereCVE-2026-42510Fix available6.6 Medium
- openstack keystoneOpenStack Keystone: LDAP identity backend does not convert enabled attribute to booleanCVE-2026-40683Fix available7.7 High
- openstack skylineOpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS)...CVE-2026-402125.4 Medium
- openstack keystoneOpenStack Keystone: Restricted application credentials can create EC2 credentialsCVE-2026-33551Fix available3.5 Low
- openstack glance, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreOpenStack Glance is affected by Server-Side Request Forgery (SSRF)CVE-2026-34881Fix available5.0 Medium
- keystonejs keystone@keystone-6/core: `isFilterable` bypass via `cursor` parameter in findManyCVE-2026-33326Fix available4.3 Medium
- ancorathemes horizonWordPress Horizon theme <= 1.1 - Local File Inclusion vulnerabilityCVE-2026-224208.1 High
- openstack vitrageOpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval InjectionCVE-2026-28370Fix available9.1 Critical
- openstack nova, red hat openstack platform 13 (queens), openstack platform 16.2 +4 more +6 moreOpenStack Nova calls qemu-img without format restrictions for resizeCVE-2026-24708Fix available8.2 High
- openstack keystonemiddleware, red hat openshift container platform 4.17, openshift container platform 4.18 +7 more +9 moreAn issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and...CVE-2026-22797Fix available9.9 Critical
- openstack keystoneOpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.CVE-2025-65073Fix available7.5 High
- openstack horizon, the opennms group meridian +1 moreSQLi in OpenNMS Horizon and MeridianCVE-2025-531226.9 Medium
- openstack horizon, the opennms group meridian +1 moreStored XSS in multiple 33.0.8files in opennms/opennmsCVE-2025-531216.9 Medium
- openstack ironicOpenStack Ironic fails to restrict paths used for file:// image URLsCVE-2025-44021Fix available2.8 Low
- keystonejs keystoneKeystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fieldsCVE-2025-46720Fix available3.1 Low
- openstack neutronOpenStack Neutron can use an incorrect ID during policy enforcementCVE-2024-53916Fix available7.5 High
- openstack heat, red hat openstack platform 13 (queens), openstack platform 16.1 +3 more +5 moreOpenstack-heat: incomplete fix for cve-2023-1625CVE-2024-73195.0 Medium
- openstack novaOpenStack Nova vulnerable to unauthorized access to potentially sensitive dataCVE-2024-40767Fix available6.5 Medium
- openstack cinder, glance, nova +2 moreOpenStack Cinder, Glance, and Nova vulnerable to arbitrary file accessCVE-2024-32498Fix available6.5 Medium
- openstack solum-yoga-eomAn issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via...CVE-2024-287167.5 High
- openstack storletsOpenStack Storlets arbitrary code execution vulnerabilityCVE-2024-28717Fix available4.9 Medium
- openstack magnum, magnum-yoga-eom +1 moreOpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attackCVE-2024-28718Fix available9.8 Critical
- openstack murano, yaql +1 moreInformation leakage in YAQLCVE-2024-29156Fix available6.5 Medium
- openstack glance-store, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreGlance-store: glance store access key logged in debug log levelCVE-2024-1141Fix available5.5 Medium
- opennms horizon, meridian +1 moreCross-site scripting in bootstrap.jspCVE-2023-40314Fix available5.8 Medium
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreInsecure barbican configuration file leaking credentialCVE-2023-1633Fix available6.6 Medium
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreIncomplete container isolationCVE-2023-16366.0 Medium
- Show moreLoading…