GHSA-8F8M-WRVR-WCVF vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

GHSA-Q623-F4J4-P4XJ vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

CVE-2026-44394 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

GHSA-WHQR-FGM5-X77Q vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

CVE-2026-42998 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

CVE-2026-42999 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

GHSA-2R23-2G6V-2M5F vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

CVE-2026-43000 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1, openstack-keystone-2025.1-fips, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.2-fips, openstack-keystone-2025.2...

PYSEC-2026-649 OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege

OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...

PYSEC-2026-655 OpenStack Keystone Logs Passwords

OpenStack Identity Keystone before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backendargument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs...

PYSEC-2026-654 OpenStack Identity Keystone Improper Privilege Management

OpenStack Identity Keystone before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID...

PYSEC-2026-650 OpenStack Keystone Denial of Service vulnerability via a large HTTP request

OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service CPU and memory consumption via a large HTTP request, as demonstrated by a long tenantname when requesting a token...

PYSEC-2026-652 OpenStack Keystone allows context-dependent attackers to bypass access restrictions

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the 1 user, 2 tenant, or 3 domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions...

PYSEC-2026-656 OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

RHSA-2026:28044 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update

Bulletin has no description...

CVE-2026-54911 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1-fips, openstack-glance-2025.1, openstack-glance-2025.1-fips, openstack-placement-2025.1,...

GHSA-3J69-69WJ-XQX2 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1-fips, openstack-glance-2025.1, openstack-glance-2025.1-fips, openstack-placement-2025.1,...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, tensorflow-cpu-jupyter, openstack-horizon-2026.1, openstack-keystone-2025.1, dbt-bigquery, openstack-horizon-2025.2, openstack-tempest-2025.2, graalvm, lmcache-cuda-12.8, openstack-kolla-toolbox-2025.1, openstack-placement-2025.2-fips,...

RHEL 9 : Red Hat OpenStack Platform 17.1 (openstack-keystone) (RHSA-2026:28044)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28044 advisory. Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. Security Fixes: OpenStack Keystone:...

openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw

A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS Amazon Web Services signature to the /v3/ec2tokens ...