CVE-2022-26779

CVE-2022-26779 (Apache CloudStack) affects CloudStack versions prior to 4.16.1.0, where project invitation tokens were generated with insecure randomness when an invite is created based on an email address. The root cause is the insecure RNG, enabling an attacker who knows the project ID and that...

CVE-2024-42062

CVE-2024-42062 (Apache CloudStack) : A permission validation flaw in CloudStack 4.10.0–4.19.1.0 lets domain-admins query all account-user API/secret keys, including those of root admins. An attacker with domain-admin access can leverage this to gain root-admin and other privileges, potentially co...

CVE-2024-29007

The Apache CloudStack management server and secondary storage VM are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The issue arises because the system follows 301 HTTP redirects provided by external servers when downloading templates or ISOs, which can trick the server into ma...

CVE-2024-45462

The CVE describes an incomplete session invalidation in Apache CloudStack that allows a user with browser access to reuse an unexpired session after logout. Affected versions: 4.15.1.0–4.18.2.3 and 4.19.0.0–4.19.1.1. Mitigation per connected documents: upgrade to 4.18.2.4 or 4.19.1.2 (or later) d...

CVE-2026-59654

Apache CloudStack's scoped global configuration functionality suffers from a resource leak (database connections not released after their effective lifetime), affecting modules such as Quota and Host-HA on the management server. Over time, the accumulated leak can lead to an eventual denial of se...

CVE-2026-61397

Apache CloudStack is impacted by a vulnerability where sensitive information is exposed to an unauthorized actor. The issue resides within the OAuth2 authentication plugin and the Google OAuth integration . Specifically, the vulnerability involves an OAuth2 Token Cross-Request Leak . Affected ver...

CVE-2026-59655

Apache CloudStack is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor in its OAuth authentication plugin . The issue occurs specifically while listing OAuth providers, which can lead to the disclosure of unauthenticated OAuth provider client-secrets . This affects versi...

CVE-2026-59780

Apache CloudStack is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in its LDAP authentication plugin . The root cause is that the listLdapConfigurations API allows any authenticated user to list LDAP configurations; by default, this API is accessible to all default role...

CVE-2026-50222

Apache CloudStack versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to missing authorization and insufficient access control validation within several userdata-related APIs. Specifically, the endpoints deleteUserData, linkUserDataToTemplate, resetUserDataForVirtualMa...

CVE-2026-59657

Apache CloudStack versions 4.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to a Cleartext Storage of Sensitive Information flaw. The issue occurs when using AsyncJob storage in the database, where sensitive information is stored without proper encryption. This could lead to un...

CVE-2026-66722

Apache CloudStack versions 4.15.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to an improper authorization flaw during CRUD operations on Project Roles and Project Role permissions. The system verifies that a caller is a Domain Admin but fails to validate whether the target pr...