Threats Tagged 'ghsa-rf22-mxh9-4qvf'

CVE-2026-93852 is a high-severity vulnerability in OpenStack Blazar before version 17.0.1. It involves missing authorization checks in the V2 lease listing API, allowing any authenticated user to enumerate leases across all projects without proper project scoping or admin-only restrictions. This exposure reveals sensitive lease-related identifiers and metadata, which can be leveraged to bypass object-level authorization controls and modify or delete leases.