CVE-2026-115642

A flaw was found in OpenStack keystonemiddleware and Keystone. The code incorrectly treats the presence of the X-Service-Token HTTP header as sufficient to skip enforcement of application credential access rules and can skip related token-binding checks. An attacker who holds an application...