OpenStack Cyborg prior to version 16.0.1 has an incorrect authorization issue (CWE-863) where multiple API endpoints use a default policy rule that unconditionally permits any request carrying a valid Keystone token. This means that authentication alone is sufficient to access sensitive functionality without proper role or project scope checks. As a result, an authenticated user with no assigned roles can execute privileged operations including reprogramming FPGA bitstreams on compute nodes through agent RPC calls. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity. No official patch or remediation level is currently documented, and no known exploits in the wild have been reported.

An attacker with any valid Keystone token, even without assigned roles or project membership, can perform unauthorized privileged actions on OpenStack Cyborg API endpoints. This includes the ability to reprogram FPGA bitstreams on arbitrary compute nodes, potentially impacting confidentiality, integrity, and availability of the affected systems. The vulnerability compromises the authorization mechanism, allowing privilege escalation within the OpenStack environment.

Patch status is not yet confirmed — check the OpenStack vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Cyborg API endpoints to trusted users only and monitor for unusual activity involving FPGA reprogramming. Review and tighten Keystone token issuance policies to limit exposure. Avoid deploying vulnerable versions in production environments where possible.