OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint.
CVE-2026-115638 is a medium severity vulnerability in OpenStack Ironic up to version 39.0.1. It involves improper handling of highly compressed data, specifically a denial of service caused by a configdrive that expands into a very large amount of uncompressed data (a gzip bomb). This can lead to resource exhaustion and service disruption.
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the response, resulting in the leakage of UUIDs of resources owned by other projects, in addition to the user message about the other projects' resources (which, by design, are sanitized generic messages). All Cinder deployments are affected.
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual owner. This affects the following operations: allow_access: grant data-plane read/write access to another tenant's share; deny_access: revoke the owner's existing access rules; update_access: escalate access level (e.g., ro to rw); create_share_backup: exfiltrate share data via a backup created under the attacker's project; soft_delete: move a foreign share to the recycle bin; restore: interfere with the owner's deletion workflow; export location metadata: create, update, and delete metadata on foreign export locations; access rule listing: disclose IPs, usernames, and CephFS keys. Any authenticated project member can exploit these operations on any public share. The share UUID is visible since the share is public.
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.
CVE-2026-93858 is a high-severity OS command injection vulnerability in OpenStack Mistral up to version 23.0.0. The vulnerability arises because the std.ssh_proxied action passes a user-supplied proxy_command directly to paramiko.ProxyCommand() without sanitization. An authenticated project member can exploit this to execute arbitrary local commands on the executor host under the executor's service account. This affects Mistral deployments that allow the std.ssh_proxied action, which is enabled by default.
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and environments. A project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with a resource of another project, which moves that resource into the caller's project and causes the original owner's subsequent updates of it to fail with server errors. Only deployments exposing the Mistral API are affected.
In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its project_id defaulted to the accepting project rather than the original workflow owner, and thus the owner can neither see nor delete it. The third project can accept this membership (that it had not actually been granted by the owner), and then read and execute the owner's private workflow; only the accepting (not the owning) project can later revoke that access.
CVE-2026-107363 is a vulnerability in OpenStack Zaqar before version 23.0.1 affecting the WebSocket transport with Keystone authentication. It allows an authenticated user with a valid token for one project to substitute another project's UUID, enabling unauthorized enumeration, inspection, creation, or deletion of queues belonging to that other project. This results in unauthorized disclosure, modification, or loss of queue data. Only deployments using the WebSocket transport with Keystone authentication are affected.
CVE-2026-97404 is a critical vulnerability in OpenStack Zaqar before version 22.0.2 affecting deployments using the WSGI transport with an authentication strategy. It allows an unauthenticated remote attacker who knows a target project's UUID to bypass Keystone authentication and pre-signed URL verification by sending a request with an empty URL-Signature header. This enables unauthorized reading, enumeration, creation, and deletion of that project's queues, messages, claims, and subscriptions. If the attacker claims an administrative role, they may perform administrative operations such as managing pools and flavors in admin_mode deployments. The websocket transport is not affected.
CVE-2026-97149 is a medium severity vulnerability in OpenStack Swift before version 2.38.2. The tempurl middleware does not reject the X-Copy-From header on PUT requests, allowing an attacker with a valid PUT TempURL to copy any object within the same account. This occurs because the TempURL signature does not cover the X-Copy-From header, and the disallowed headers list is incomplete. The vulnerability affects deployments using the default proxy pipeline with account-level TempURL keys. Cross-account copying is not possible, limiting the scope to the same account.
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled load balancer can embed a newline and inject arbitrary HAProxy configuration directives. Only deployments using the Amphora provider are affected.
CVE-2026-94571 is a critical code injection vulnerability in OpenStack Octavia affecting the Amphora provider driver before version 18.0.1. The flaw allows an authenticated project member who owns a load balancer to inject arbitrary HAProxy directives via crafted L7 policy redirect_url and redirect_prefix fields. This occurs because control characters are not properly rejected and are written raw into the HAProxy configuration. Only deployments using the Amphora provider are impacted.
CVE-2026-93852 is a high-severity vulnerability in OpenStack Blazar before version 17.0.1. It involves missing authorization checks in the V2 lease listing API, allowing any authenticated user to enumerate leases across all projects without proper project scoping or admin-only restrictions. This exposure reveals sensitive lease-related identifiers and metadata, which can be leveraged to bypass object-level authorization controls and modify or delete leases.
OpenStack Blazar versions before 17.0.1 have a vulnerability in the V2 lease API where object-level authorization is not properly enforced on update and delete operations. This is due to a mismatch in parameter naming during lease lookup, causing authorization to fallback incorrectly. As a result, any authenticated user who knows a lease ID can modify or delete leases owned by other users or projects, bypassing intended ownership checks.
CVE-2026-71198 is a server-side request forgery (SSRF) vulnerability in OpenStack Glance before version 32.0.1. The flaw exists in the location API, which fails to validate destination hosts when adding an HTTP location to an image. This allows an authenticated user to add locations pointing to internal endpoints such as the cloud metadata service and retrieve data by downloading the image. Both the new POST /v2/images/{id}/locations API and the old PATCH API (when show_multiple_locations is enabled) are affected. Deployments using the HTTP store backend are vulnerable.
CVE-2026-90461 is a medium severity vulnerability in OpenStack Ironic up to version 38.0.0. The flaw involves improper restriction of communication channels, causing the software to potentially send a username and password to an unintended remote host when the Image Service uses HTTP(S) Basic Authentication. This can lead to credential exposure. The CVSS score is 6.3, reflecting a network attack vector with high confidentiality impact but requiring low privileges and high attack complexity.
OpenStack Keystone versions prior to 29.0.3 contain an authorization flaw affecting tokens obtained via delegated authentication methods. These tokens can improperly create, modify, or delete credentials through the /v3/credentials API. EC2-derived tokens can also read sensitive credential blobs, exposing secrets such as TOTP MFA seeds. Additionally, the PATCH /v3/credentials endpoint does not validate the post-update project_id, allowing unauthorized project assignment of credentials. All Keystone deployments using delegated authentication are impacted.
CVE-2026-80183 is a high-severity vulnerability in OpenStack Keystone before version 29.0.3. It allows any authenticated user with the role 'reader' on any project to list all project-scoped role assignments under any domain by exploiting a logic flaw in the domain ID check. This leads to unauthorized disclosure of names and home-domain IDs of users, groups, projects, and roles across the cloud deployment. The issue arises from misuse of a null domain_id value in the role assignment listing function, enabling attackers to map role assignments cloud-wide.