CVE-2025-69233

CVE-2025-69233 affects Apache CloudStack and describes time-of-check/time-of-use race conditions in the resource count check and increment logic, along with missing validations, that allow users to exceed allocation limits for accounts/domains. This can enable an attacker to degrade infrastructur...

CVE-2025-66171

The CloudStack Backup plugin in Apache CloudStack versions 4.21.0.0 and 4.22.0.0 contains improper access logic . An authenticated user with access to specific APIs can exploit this flaw to create new virtual machines using the backup data of any other user within the environment. To remediate th...

CVE-2025-59454

Apache CloudStack contains an access control error due to insufficient permission validation. This vulnerability affects several APIs, including createNetworkACL, listNetworkACLs, listResourceDetails, listVirtualMachinesUsageHistory, and listVolumesUsageHistory. Although these endpoints are restr...

CVE-2026-59085

A Server-Side Request Forgery (SSRF) vulnerability exists in the webhook module of Apache CloudStack . This flaw allows an attacker to induce the server-side application to make requests to unintended locations via webhook delivery requests . The vulnerability affects versions 4.20.0.0 through 4....

CVE-2026-62440

An Improper Access Control vulnerability exists in the Kubernetes Service (CKS) plugin of Apache CloudStack , affecting versions 4.21.0.0 through 4.22.1.0 . This flaw allows for cross-tenant manipulation of the Kubernetes cluster specifically during the processes of adding and removing nodes . To...

CVE-2025-66172

The CloudStack Backup plugin versions 4.21.0.0 and 4.22.0.0 contain an improper access logic vulnerability. This flaw allows any authenticated user with access to specific APIs to restore a volume from another user's backups and attach it to their own virtual machines in environments where the pl...

CVE-2025-66170

The CloudStack Backup plugin in versions 4.21.0.0 and 4.22.0.0 contains an improper authorization logic vulnerability. Authenticated users with account access in CloudStack environments where this plugin is enabled can leverage specific APIs to list backups from any account within the environment...

CVE-2026-50222

Apache CloudStack versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to missing authorization and insufficient access control validation within several userdata-related APIs. Specifically, the endpoints deleteUserData, linkUserDataToTemplate, resetUserDataForVirtualMa...

CVE-2026-59799

Apache CloudStack is affected by an improper privilege management vulnerability in its Two-factor authentication plugin . The flaw allows for a bypass of the two-factor authentication disable flow due to a missing privilege check. This issue impacts versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0...

CVE-2026-61399

Apache CloudStack is affected by an Improper Encoding or Escaping of Output vulnerability in its UI when using the Lock User functionality . This flaw leads to a Cross-Site Scripting (XSS) issue, which allows an attacker to inject malicious scripts into web pages viewed by other users. The vulner...

CVE-2026-68745

Apache CloudStack versions 4.20.3.0 and 4.22.1.0 are vulnerable to certificate validation failures within the SAML authentication process. This flaw allows a malicious agent to forge a SAML response to the management server by either spoofing the Identity Provider (IdP) IP address or registering ...

CVE-2026-66721

Apache CloudStack versions 4.12.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to a missing authorization issue in the listHostTags API. While Domain Admins are permitted to call this API, it fails to apply domain scoping, returning host tags for every host in the entire enviro...

CVE-2026-59657

Apache CloudStack versions 4.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to a Cleartext Storage of Sensitive Information flaw. The issue occurs when using AsyncJob storage in the database, where sensitive information is stored without proper encryption. This could lead to un...

CVE-2026-65613

Apache CloudStack versions 4.20.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. The flaw resides in the Webhook module and occurs specifically while listing and deleting deliveries , potentially allowi...

CVE-2026-66722

Apache CloudStack versions 4.15.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to an improper authorization flaw during CRUD operations on Project Roles and Project Role permissions. The system verifies that a caller is a Domain Admin but fails to validate whether the target pr...