Threat database

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.

OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.

CVE-2026-49299 is an authorization vulnerability in OpenStack Neutron before version 28.0.1. The issue arises because the tagging controller uses plural policy action names for single-tag write operations, while the policy rules use singular names. This mismatch causes the default policy to allow project readers to create and update tags on resources within the same project. Versions 26.0.0, 27.0.0, and 28.0.0 of Neutron are affected.

CVE-2026-44394 is a medium severity vulnerability in OpenStack Keystone affecting federated identity deployments using SAML2 or OpenID Connect. The flaw allows the federated token rescoping mechanism to issue new tokens without propagating the original token's expiry time, enabling indefinite token reuse and bypassing token lifetime policies. This impacts token expiration enforcement in federated authentication scenarios. The vulnerability affects specific versions of Keystone and is a variant of a previously known issue (CVE-2012-3426).

An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with the member role on a project can escalate to admin by chaining unrestricted application credentials with Keystone trusts. The impersonated token carries the victim's identity, which passes the trustor validation check. Keystone then validates the delegated roles against the victim's actual role assignments in the database, not the roles on the requesting token. This allows the attacker to create a trust delegating the victim's admin role to themselves. The trust persists independently, and additional trusts and application credentials can be created to maintain access. All actions are logged under the victim's identity.

An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditionally merges the raw JSON request body into the policy enforcement dictionary via policy_dict.update(json_input.copy()), overwriting trusted target data that was previously set from database lookups. Because flask.request.get_json is called with force=True, this works regardless of Content-Type or HTTP method. Any authenticated user can inject arbitrary policy target attributes (e.g., user_id, project_id) into the request body to bypass RBAC checks and perform unauthorized operations on resources belonging to other users or projects. This was introduced in commit 5ea59f52 (Rocky/14.0.0).

A vulnerability in OpenStack Keystone before version 29.0.2 allows an attacker to impersonate another user by authenticating with their own application credential but specifying a different user's name and domain. This results in Keystone issuing a token attributed to the victim user with project-scoped roles that combine the attacker's and victim's permissions. The flaw enables audit evasion, unauthorized reading of victim credentials, and acting as the victim within shared projects.

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty buffer and re-reads, causing the proxy-server worker handling the request to become permanently unresponsive with increasing CPU and memory consumption. An authenticated attacker can systematically exhaust all proxy-server workers, resulting in denial of service. The defect was introduced in Swift 2.36.0.

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.

In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.

CVE-2026-40214 is a vulnerability in OpenStack Cyborg versions prior to 16.0.1 where the Accelerator Request (ARQ) API fails to enforce project ownership. The project_id field in the database is always NULL, and there is no project filtering in database queries. Policy checks incorrectly compare the caller's project_id with itself rather than the target resource. This allows any authenticated non-admin user to perform actions such as deleting ARQs associated with other projects, leading to cross-tenant denial of service.

CVE-2026-40213 is an authorization vulnerability in OpenStack Cyborg versions before 16.0.1. The default policy for multiple API endpoints uses rule:allow with check_str='@', which authorizes any request with a valid Keystone token regardless of roles, project membership, or scope. This allows an authenticated user without any role assignments to perform privileged actions such as reprogramming FPGA bitstreams on arbitrary compute nodes via agent RPC.

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.

CVE-2026-43002 is a medium severity vulnerability in OpenStack Horizon versions 25.6.0 and 25.7 before 25.7.3. It involves a write operation to session storage before user authentication, which can lead to exhaustion of storage resources by unauthenticated requests. This issue is a regression of a previous fix (CVE-2014-8124). No known exploits are reported in the wild, and no official patch or remediation guidance is currently available.