CVE-2026-115642

A flaw was found in OpenStack keystonemiddleware and Keystone. The code incorrectly treats the presence of the X-Service-Token HTTP header as sufficient to skip enforcement of application credential access rules and can skip related token-binding checks. An attacker who holds an application...

CVE-2026-115642

OSSA-2026-050: keystonemiddleware accessrules bypass via X-Service-Token...