CVE-2025-22828

Apache CloudStack versions from 4.16.0 onwards are affected by an access validation issue (CWE-200) allowing users to list or add comments (annotations ) on resources they are not authorized to access. An attacker with a user account and knowledge of a resource UUID can exploit this to read exist...

CVE-2025-47849

A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 . A malicious Domain Admin user in the ROOT domain can bypass restrictions to obtain the API key and secret key of user-accounts with an Admin role type in the same domain. This allows the attacker...

CVE-2025-26521

Apache CloudStack versions prior to 4.19.3.0 and 4.20.1.0 are vulnerable to an information disclosure flaw where the API key and secret key of the 'kubeadmin' user are improperly exposed. When a user-account creates a CKS-based Kubernetes cluster in a project, these credentials are used to create...

CVE-2025-47713

A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 due to improper privilege management. A malicious Domain Admin user in the ROOT domain can bypass restrictions to reset the passwords of user-accounts with an Admin role type . This allows an attac...

CVE-2025-30675

CVE-2025-30675 in Apache CloudStack affects the listTemplates and listIsos APIs due to a flawed access-control check when domainid is specified with filters self or selfexecutable. The issue allows a Domain Admin or Resource Admin to enumerate templates/ISOs in unrelated domains, breaching isolat...

CVE-2025-22829

Affected software: Apache CloudStack with the Quota plugin (version 4.20.0.0). Issue: Improper privilege management logic lets an authenticated user with access to specific APIs enable/disable quota‑related emails and list quota configurations for any account in environments where the plugin is e...

CVE-2025-59302

Apache CloudStack versions 4.18.0 through 4.20.1 and 4.21.0 through 4.21.9 are vulnerable to a Code Injection (CWE-94) flaw. The vulnerability exists in specific APIs accessible only to administrators: quotaTariffCreate, quotaTariffUpdate, createSecondaryStorageSelector, updateSecondaryStorageSel...

CVE-2025-59454

Apache CloudStack contains an access control error due to insufficient permission validation. This vulnerability affects several APIs, including createNetworkACL, listNetworkACLs, listResourceDetails, listVirtualMachinesUsageHistory, and listVolumesUsageHistory. Although these endpoints are restr...