CVE-2026-93856

A flaw was found in OpenStack Cinder. An authenticated user with project-level access can retrieve messages intended for other projects by issuing a message listing request to the Block Storage API. This flaw leads to information disclosure, exposing resource identifiers and status messages...