openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation

A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full se...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update

An update for openstack-keystone is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation

A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied projectid for an EC2-type credential was not validated against the project of the authenticating...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8433-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8433-1 advisory. It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An...

GHSA-FHV5-28VV-H8M8 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

CVE-2026-48524 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

CVE-2026-48523 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

GHSA-W7VC-732C-9M39 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

GHSA-XGMM-8J9V-C9WX vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

CVE-2026-48525 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

CVE-2026-48526 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

CVE-2026-48522 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

GHSA-993G-76C3-P5M4 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, netbox, openstack-placement-2025.1-fips, kserve, openstack-keystone-2026.1-fips, netbox-fips, openstack-glance-2025.1, airflow,...

USN-8433-1: OpenStack Keystone vulnerabilities

It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An authenticated attacker with only a reader role could possibly use this issue to bypass the role restrictions imposed on the application credential. CVE-2026-33551 It was discovered...

CVE-2026-44394

A flaw was found in OpenStack Keystone. The federated token rescoping mechanism does not correctly propagate the original token's expiry to newly issued tokens. This allows a federated user to repeatedly rescope a token before it expires, effectively maintaining indefinite access and bypassing...

CVE-2026-42998

A flaw was found in OpenStack Keystone. The application credential authentication plugin fails to verify if the user provided in an authentication request matches the owner of the application credential. This allows a remote attacker to authenticate with their own credentials while impersonating...

CVE-2026-42999

A flaw was found in OpenStack Keystone. This vulnerability allows an authenticated user to bypass Role-Based Access Control RBAC checks by injecting arbitrary policy target attributes into the request body. This enables the user to perform unauthorized operations on resources belonging to other...

Linux Distros Unpatched Vulnerability : CVE-2026-44394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to...

Linux Distros Unpatched Vulnerability : CVE-2026-42998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in...