PYSEC-2026-872 OpenStack Nova VMware instance leak potentially leading to compute DoS

The VMware driver in OpenStack Compute Nova before 2014.1.4 allows remote authenticated users to cause a denial of service disk consumption by deleting an instance in the resize state...

PYSEC-2026-815 OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme

The V2 API in OpenStack Image Registry and Delivery Service Glance before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem:// URL in the image location property. NOTE: this vulnerability exists because of...

CVE-2026-44394 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

GHSA-Q623-F4J4-P4XJ vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

GHSA-8F8M-WRVR-WCVF vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

GHSA-WHQR-FGM5-X77Q vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

CVE-2026-42998 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

CVE-2026-42999 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

GHSA-2R23-2G6V-2M5F vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

CVE-2026-43000 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.1...

PYSEC-2026-689 OpenStack Nova Denial of service attack on the compute host

An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. The same code error...

PYSEC-2026-619 Openstack Aodh can be used to launder Keystone trusts

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust ID...

PYSEC-2026-754 Openstack tripleo-heat-templates unauthenticated file access

A resource-permission flaw was found in the tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thu...

PYSEC-2026-694 OpenStack Nova Filter Scheduler Bypass

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters for example, the ImagePropertiesFilter or the IsolatedHostsFilter. All setups using Nova Filter...

PYSEC-2026-692 OpenStack Nova DoS by rebuilding the same instance with a new image multiple times

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

PYSEC-2026-651 OpenStack Identity (Keystone) Denial of Service

OpenStack Identity Keystone before 2013.1 allows remote attackers to cause a denial of service memory consumption and crash via multiple long requests...

PYSEC-2026-649 OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege

OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...

PYSEC-2026-641 OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

PYSEC-2026-642 Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...