CVE-2026-83535

HighCVSS 7.4

Published: 12/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

A fail-open flaw was found in openstack-network-exporter: when user authentication is configured but TLS is omitted or misconfigured, basic authentication is silently bypassed. An adjacent network attacker can then access OVS and OVN dataplane metrics without credentials.

Risk Assessment

An attacker can enumerate bridge names, port counters, OVN controller state, and host topology, leading to information disclosure. This may facilitate further attacks against the OpenStack environment.

Recommendation

Properly configure TLS alongside authentication in openstack-network-exporter and verify that basic auth is not bypassed. Restrict network access to the metrics endpoint.

Other vulnerabilities in openstack-network-exporter

CVE-2026-83536Medium
A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header bytes, the attacker can exhaust server resources, specifically file descriptors, leading to a Denial of Service (DoS) that prevents legitimate Prometheus metric scraping and alerting.

Original NVD description (English source)

A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or misconfigures Transport Layer Security (TLS), the basic authentication mechanism is silently bypassed. This fail-open design allows an adjacent network attacker to access sensitive Open vSwitch (OVS) and Open Virtual Network (OVN) dataplane metrics without credentials. Consequently, an attacker can enumerate bridge names, port counters, OVN controller state, and host topology, leading to information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS