RHEL 9 : Red Hat OpenStack Platform 17.1 (openstack-keystone) (RHSA-2026:28044)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28044 advisory. Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. Security Fixes: OpenStack Keystone:...

openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation

A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full se...

OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation

A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied projectid for an EC2-type credential was not validated against the project of the authenticating...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update

An update for openstack-keystone is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw

A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS Amazon Web Services signature to the /v3/ec2tokens ...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8433-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8433-1 advisory. It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An...

CVE-2026-48526 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

CVE-2026-48523 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

CVE-2026-48524 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

CVE-2026-48525 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

GHSA-FHV5-28VV-H8M8 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

GHSA-W7VC-732C-9M39 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

GHSA-XGMM-8J9V-C9WX vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

CVE-2026-48522 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

GHSA-993G-76C3-P5M4 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, openstack-placement-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-placement-2025.1, netbox-fips, openstack-placement-2026.1,...

USN-8433-1: OpenStack Keystone vulnerabilities

It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An authenticated attacker with only a reader role could possibly use this issue to bypass the role restrictions imposed on the application credential. CVE-2026-33551 It was discovered...

CVE-2026-44394

A flaw was found in OpenStack Keystone. The federated token rescoping mechanism does not correctly propagate the original token's expiry to newly issued tokens. This allows a federated user to repeatedly rescope a token before it expires, effectively maintaining indefinite access and bypassing...

CVE-2026-42998

A flaw was found in OpenStack Keystone. The application credential authentication plugin fails to verify if the user provided in an authentication request matches the owner of the application credential. This allows a remote attacker to authenticate with their own credentials while impersonating...

CVE-2026-42999

A flaw was found in OpenStack Keystone. This vulnerability allows an authenticated user to bypass Role-Based Access Control RBAC checks by injecting arbitrary policy target attributes into the request body. This enables the user to perform unauthorized operations on resources belonging to other...