Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update
Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) has multiple security vulnerabilities including unauthorized cross-project access, unauthorized access due to LDAP user status mishandling, and privilege escalation via EC2 credential creation. These issues affect the Keystone identity service API implementation. Red Hat has issued an important security update to address these vulnerabilities.
AI Analysis
Technical Summary
This advisory covers three security vulnerabilities in the OpenStack Keystone component of Red Hat OpenStack Services on OpenShift 18.0 (Antelope). The first vulnerability (CVE-2026-43001) allows unauthorized cross-project access due to improper validation during EC2 credential creation. The second (CVE-2026-40683) involves unauthorized access caused by incorrect handling of LDAP user status. The third (CVE-2026-33551) enables privilege escalation through EC2 credential creation. These vulnerabilities impact the identity service API implemented in Python. Red Hat has released updated packages to fix these issues.
Potential Impact
The vulnerabilities allow unauthorized access and privilege escalation within the OpenStack Keystone service, potentially compromising identity and access controls. Unauthorized cross-project access and incorrect LDAP user status handling could lead to exposure or misuse of credentials. Privilege escalation could allow attackers to gain elevated permissions. The severity is rated as high by Red Hat.
Mitigation Recommendations
Red Hat has released updated openstack-keystone packages for Red Hat OpenStack Services on OpenShift 18.0 to address these vulnerabilities. Users should apply the security update as detailed in Red Hat advisory RHSA-2026:39808 and the referenced article https://access.redhat.com/articles/11258. No indication of alternative mitigations or that no action is required was provided.
Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update
Description
Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) has multiple security vulnerabilities including unauthorized cross-project access, unauthorized access due to LDAP user status mishandling, and privilege escalation via EC2 credential creation. These issues affect the Keystone identity service API implementation. Red Hat has issued an important security update to address these vulnerabilities.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers three security vulnerabilities in the OpenStack Keystone component of Red Hat OpenStack Services on OpenShift 18.0 (Antelope). The first vulnerability (CVE-2026-43001) allows unauthorized cross-project access due to improper validation during EC2 credential creation. The second (CVE-2026-40683) involves unauthorized access caused by incorrect handling of LDAP user status. The third (CVE-2026-33551) enables privilege escalation through EC2 credential creation. These vulnerabilities impact the identity service API implemented in Python. Red Hat has released updated packages to fix these issues.
Potential Impact
The vulnerabilities allow unauthorized access and privilege escalation within the OpenStack Keystone service, potentially compromising identity and access controls. Unauthorized cross-project access and incorrect LDAP user status handling could lead to exposure or misuse of credentials. Privilege escalation could allow attackers to gain elevated permissions. The severity is rated as high by Red Hat.
Mitigation Recommendations
Red Hat has released updated openstack-keystone packages for Red Hat OpenStack Services on OpenShift 18.0 to address these vulnerabilities. Users should apply the security update as detailed in Red Hat advisory RHSA-2026:39808 and the referenced article https://access.redhat.com/articles/11258. No indication of alternative mitigations or that no action is required was provided.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:39808
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-40683","CVE-2026-43001"]
- Cvss Version
- null
Threat ID: 6a75f714bf8831d53984fe40
Added to database: 08/07/2026, 15:17:40 UTC
Last enriched: 08/07/2026, 15:50:07 UTC
Last updated: 08/08/2026, 00:41:12 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.