CVE-2026-43000 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.2-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2...

CVE-2026-42998 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.2-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2...

CVE-2026-42999 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.2-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2...

GHSA-2R23-2G6V-2M5F vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.2-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2...

OpenStack Identity (Keystone) Denial of Service

OpenStack Identity Keystone before 2013.1 allows remote attackers to cause a denial of service memory consumption and crash via multiple long requests...

OpenStack Identity Keystone Improper Privilege Management

OpenStack Identity Keystone before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID...

PYSEC-2026-655 OpenStack Keystone Logs Passwords

OpenStack Identity Keystone before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backendargument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs...

PYSEC-2026-649 OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege

OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...

PYSEC-2026-654 OpenStack Identity Keystone Improper Privilege Management

OpenStack Identity Keystone before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID...

OpenStack Keystone allows context-dependent attackers to bypass access restrictions

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the 1 user, 2 tenant, or 3 domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions...

PYSEC-2026-652 OpenStack Keystone allows context-dependent attackers to bypass access restrictions

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the 1 user, 2 tenant, or 3 domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions...

PYSEC-2026-650 OpenStack Keystone Denial of Service vulnerability via a large HTTP request

OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service CPU and memory consumption via a large HTTP request, as demonstrated by a long tenantname when requesting a token...

PYSEC-2026-656 OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

Openstack Keystone Incorrect Authorization vulnerability

A flaw was found in openstack-keystone, only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity. A patch is...

PT-2026-53458

A flaw was found in openstack-keystone, only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity. A patch is...

RHSA-2026:28044 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update

Bulletin has no description...

GHSA-3J69-69WJ-XQX2 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-placement-2025.1-fips, openstack-glance-2026.1, openstack-placement-2025.2-fips, openstack-horizon-2025.1-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips,...

CVE-2026-54911 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-placement-2025.1-fips, openstack-glance-2026.1, openstack-placement-2025.2-fips, openstack-horizon-2025.1-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips,...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: wazuh-manager, graalvm, azure-functions-host, openstack-keystone-2025.1-fips, authentik, openstack-keystone-2026.1-fips, dbt-core, jupyter-all-spark-notebook, openstack-placement-2025.1-fips, synapse, openstack-kolla-toolbox-2025.1-fips, openstack-kolla-toolbox-2025....