CVE-2026-115642

HighCVSS 8.3

Published: 30/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

44th percentile - higher than 44% of all known CVEs

Summary

In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.

Risk Assessment

A holder of a restricted application credential can gain broader privileges, undermining the access control model in the OpenStack cloud.

Recommendation

Update keystonemiddleware to version 13.0.2 or later and review application credentials for excessive permissions.

Other vulnerabilities in OpenStack keystonemiddleware

CVE-2026-22797Critical
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_token middleware fails to sanitize incoming authentication headers before processing OAuth 2.0 tokens. By sending forged identity headers such as X-Is-Admin-Project, X-Roles, or X-User-Id, an authenticated attacker may escalate privileges or impersonate other users. All deployments using the external_oauth2_token middleware are affected.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS