Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update
Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) contains multiple security vulnerabilities that allow unauthorized access and privilege escalation. These include improper validation in EC2 credential creation leading to unauthorized cross-project access, incorrect LDAP user status handling causing unauthorized access, and privilege escalation through EC2 credential creation. Red Hat has released an important security update addressing these issues.
AI Analysis
Technical Summary
The Red Hat OpenStack Keystone component in OpenStack Services on OpenShift 18.0 has three identified vulnerabilities: CVE-2026-43001 allows unauthorized cross-project access due to improper validation during EC2 credential creation; CVE-2026-40683 permits unauthorized access because of incorrect handling of LDAP user status; and CVE-2026-33551 enables privilege escalation through EC2 credential creation. These vulnerabilities affect the identity service API implementation in Keystone. Red Hat has issued a security advisory RHSA-2026:39808 with updates to mitigate these issues.
Potential Impact
These vulnerabilities can lead to unauthorized access across projects, unauthorized access due to LDAP user status mishandling, and privilege escalation within the OpenStack Keystone service. This compromises the integrity and security of identity management in OpenStack deployments using Red Hat OpenStack Services on OpenShift 18.0, potentially allowing attackers to gain elevated privileges or access resources they should not have.
Mitigation Recommendations
Red Hat has released an important security update for openstack-keystone in Red Hat OpenStack Services on OpenShift 18.0. Users should apply the update as described in the Red Hat advisory RHSA-2026:39808 and the referenced article https://access.redhat.com/articles/11258 to remediate these vulnerabilities. No indication is given that no action is required or that the issues are already mitigated; therefore, applying the official update is recommended.
Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update
Description
Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) contains multiple security vulnerabilities that allow unauthorized access and privilege escalation. These include improper validation in EC2 credential creation leading to unauthorized cross-project access, incorrect LDAP user status handling causing unauthorized access, and privilege escalation through EC2 credential creation. Red Hat has released an important security update addressing these issues.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat OpenStack Keystone component in OpenStack Services on OpenShift 18.0 has three identified vulnerabilities: CVE-2026-43001 allows unauthorized cross-project access due to improper validation during EC2 credential creation; CVE-2026-40683 permits unauthorized access because of incorrect handling of LDAP user status; and CVE-2026-33551 enables privilege escalation through EC2 credential creation. These vulnerabilities affect the identity service API implementation in Keystone. Red Hat has issued a security advisory RHSA-2026:39808 with updates to mitigate these issues.
Potential Impact
These vulnerabilities can lead to unauthorized access across projects, unauthorized access due to LDAP user status mishandling, and privilege escalation within the OpenStack Keystone service. This compromises the integrity and security of identity management in OpenStack deployments using Red Hat OpenStack Services on OpenShift 18.0, potentially allowing attackers to gain elevated privileges or access resources they should not have.
Mitigation Recommendations
Red Hat has released an important security update for openstack-keystone in Red Hat OpenStack Services on OpenShift 18.0. Users should apply the update as described in the Red Hat advisory RHSA-2026:39808 and the referenced article https://access.redhat.com/articles/11258 to remediate these vulnerabilities. No indication is given that no action is required or that the issues are already mitigated; therefore, applying the official update is recommended.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:39808
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-40683","CVE-2026-43001"]
- State
- PUBLISHED
Threat ID: 6a75f714bf8831d53984fe40
Added to database: 08/07/2026, 15:17:40 UTC
Last enriched: 08/14/2026, 23:43:37 UTC
Last updated: 09/21/2026, 22:01:33 UTC
Views: 69
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.