CVE-2024-41107

CVE-2024-41107 — Apache CloudStack: SAML Signature Exclusion Root cause: CloudStack’s SAML authentication can bypass signature checks when SAML is enabled, allowing spoofed, unsigned SAML responses to authenticate as a legitimate SAML-enabled user. Impact: In affected environments, an attacker ca...

CVE-2025-47849

CVE-2025-47849 (Apache CloudStack) : Privilege escalation affects CloudStack versions 4.10.0.0 through 4.20.0.0. A malicious Domain Admin in the ROOT domain can obtain the API key and secret key of Admin-role accounts in the same domain, enabling impersonation and access to sensitive APIs and res...

CVE-2025-26521

CVE-2025-26521 describes an information-disclosure flaw in Apache CloudStack where a project member can access the kubeadmin API key and secret for the creator’s CKS-based Kubernetes cluster, enabling impersonation and possible full compromise of the creator’s resources. Affected versions are pri...

CVE-2025-47713

Apache CloudStack

CVE-2024-45693

The CVE-2024-45693 issue affects Apache CloudStack where missing validation of the origin of requests enables Cross-Site Request Forgery in the web interface. This could allow an attacker to impersonate an authenticated user and gain privileges, potentially leading to account takeover and exposur...

CVE-2024-45219

Apache CloudStack CVE-2024-45219 concerns a KVM-related vulnerability where default user uploads/registrations of templates and volumes can bypass validation for KVM-compatible disks. The issue spans CloudStack versions 4.0.0–4.18.2.3 and 4.19.0.0–4.19.1.1, allowing an attacker who can upload or ...

CVE-2026-50112

Apache CloudStack versions 4.14.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by two related vulnerabilities in template download handling. When a tenant registers a VM template with directDownload=true pointing to a .metalink file, the management server fetches the metalink XML...

CVE-2026-25077

CVE-2026-25077 affects Apache CloudStack with KVM deployments. Due to missing file name sanitization, account users can register templates for direct download to primary storage, enabling an attacker to execute arbitrary code on KVM hosts. This can compromise resource integrity and confidentialit...

CVE-2025-66467

CVE-2025-66467 affects Apache CloudStack in scenarios where MinIO policy cleanup is not performed on bucket deletion. The issue allows previous bucket owners to retain access to buckets they formerly owned: if another user creates a bucket with the same name, those prior owners can gain unauthori...

CVE-2026-47359

An OS Command Injection vulnerability exists in Apache CloudStack's NAS backup provider plugin . The addBackupRepository API (available since 4.20.0.0) and updateBackupRepository API (introduced in 4.22.0.0) accept unsanitized mount command options for backup repositories. A malicious operator ac...

CVE-2026-61400

Apache CloudStack is affected by a command injection vulnerability in the getDiagnosticsData and runDiagnostics APIs used for system VM and Virtual Router diagnostics. An authenticated user with Admin role permissions can achieve arbitrary command execution as root on the affected instances, resu...

CVE-2025-66172

The CVE pertains to CloudStack’s Backup plugin, affected in versions 4.21.0.0 to 4.22.0.0, where improper access logic allows any authenticated user in a CloudStack 4.21.0.0+ environment (with the plugin enabled and API access) to restore a volume from another user’s backups and attach it to thei...

CVE-2026-68745

Apache CloudStack versions 4.20.3.0 and 4.22.1.0 (all platforms) suffer from certificate validation failures in their SAML authentication flow. The root cause is that SAML2 signature validation is silently skipped when the Identity Provider (IdP) is configured without a certificate. This allows a...

CVE-2026-59799

Apache CloudStack is affected by an improper privilege management flaw in its Two-Factor Authentication plugin , specifically a missing privilege check in the 2FA disable flow that allows it to be bypassed. The vulnerability affects versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0...