# OpenStack vulnerabilities Source: https://junglewise.ai/threats/vendors/openstack Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/openstack.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 49 vulnerabilities in OpenStack: 0 in the last 7 days and 16 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-115642, was published on 30 October 2026. 6 vulnerabilities in the last four weeks, down 25% on the four before (8). 1 critical against 0. 5 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 6 - Last 90 days: 16 - All time: 49 (3 critical, 0 exploited in the wild) ## About OpenStack Open-source cloud computing platform for building and managing public and private clouds. ## Latest OpenStack vulnerabilities - [CVE-2026-115642: OpenStack keystonemiddleware access rules bypass via X-Service-Token](https://junglewise.ai/threats/cve-2026-115642-in-openstack-keystonemiddleware-before-13-0-2-by-supplying-a) (high, CVSS 8.3, published 30 Oct 2026) - [CVE-2026-90458: OpenStack Ironic path injection in Redfish vendor_passthru](https://junglewise.ai/threats/cve-2026-90458-openstack-ironic-before-39-0-1-allows-delete-and-get-via-vendor) (medium, CVSS 5.4, published 23 Oct 2026) - [CVE-2026-89419: OpenStack Ironic authorization bypass in node maintenance setting](https://junglewise.ai/threats/cve-2026-89419-openstack-ironic-before-39-0-1-sometimes-allows-a-user-to-change) (medium, CVSS 5, published 23 Oct 2026) - [CVE-2026-115638: OpenStack Ironic denial of service via gzip bomb in configdrive](https://junglewise.ai/threats/cve-2026-115638-openstack-ironic-through-39-0-1-allows-a-denial-of-service-via-a) (medium, CVSS 4.3, published 23 Oct 2026) - [CVE-2026-93856: OpenStack Cinder cross-project information disclosure in Messages API](https://junglewise.ai/threats/cve-2026-93856-in-openstack-cinder-through-29-0-0-cross-project-information) (medium, CVSS 4.3, published 21 Oct 2026) - [CVE-2026-71195: OpenStack Manila cross-project authorization bypass on public shares](https://junglewise.ai/threats/cve-2026-71195-in-openstack-manila-before-23-0-1-multiple-manila-api-operations) (critical, CVSS 9.9, published 21 Oct 2026) - [CVE-2026-51773: OpenStack glance_store credential leak in VMware datastore driver](https://junglewise.ai/threats/cve-2026-51773-an-issue-in-the-vmware-datastore-driver-of-openstack-glance-store) (high, CVSS 8.1, published 25 Sep 2026) - [CVE-2026-51772: OpenStack Glance Image API server-side request forgery](https://junglewise.ai/threats/cve-2026-51772-a-server-side-request-forgery-ssrf-vulnerability-exists-in-the) (info, published 25 Sep 2026) - [CVE-2026-97404: OpenStack Zaqar authentication bypass in WSGI transport](https://junglewise.ai/threats/cve-2026-97404-in-openstack-zaqar-before-22-0-2-wsgi-transport-mishandles-the) (info, published 24 Sep 2026) - [CVE-2026-97149: OpenStack Swift tempurl information disclosure via X-Copy-From](https://junglewise.ai/threats/cve-2026-97149-in-openstack-swift-before-2-38-2-the-tempurl-middleware-does-not) (info, published 24 Sep 2026) - [CVE-2026-94572: OpenStack Octavia HAProxy configuration injection in tls_ciphers field](https://junglewise.ai/threats/cve-2026-94572-in-openstack-octavia-before-18-0-1-the-amphora-provider-driver) (info, published 21 Sep 2026) - [CVE-2026-94571: OpenStack Octavia HAProxy configuration injection via L7 redirect URL](https://junglewise.ai/threats/cve-2026-94571-in-openstack-octavia-before-18-0-1-the-amphora-provider-driver) (info, published 21 Sep 2026) - [CVE-2026-93854: OpenStack Blazar authorization bypass in Lease API](https://junglewise.ai/threats/cve-2026-93854-in-openstack-blazar-before-17-0-1-the-v2-lease-api-does-not) (info, published 18 Sep 2026) - [CVE-2026-93852: OpenStack Blazar authorization bypass in Lease API](https://junglewise.ai/threats/cve-2026-93852-in-openstack-blazar-before-17-0-1-the-v2-lease-listing-operation) (info, published 18 Sep 2026) - [CVE-2026-90461: OpenStack Ironic credential leakage in HTTP Basic Authentication](https://junglewise.ai/threats/cve-2026-90461-openstack-ironic-credential-leakage-in-http-basic-authentication) (medium, CVSS 6.3, published 11 Sep 2026) - [CVE-2026-76878: OpenStack Aodh project scoping bypass in alarm list API](https://junglewise.ai/threats/cve-2026-76878-openstack-aodh-project-scoping-bypass-in-alarm-list-api) (info, published 19 Aug 2026) - [CVE-2026-74250: OpenStack Ironic autodetect deploy interface cleaning bypass](https://junglewise.ai/threats/cve-2026-74250-openstack-ironic-autodetect-deploy-interface-cleaning-bypass) (medium, CVSS 6.3, published 14 Aug 2026) - [CVE-2026-74248: OpenStack Octavia QoS policy authorization bypass](https://junglewise.ai/threats/cve-2026-74248-openstack-octavia-qos-policy-authorization-bypass) (medium, CVSS 4.3, published 14 Aug 2026) - [CVE-2026-55707: OpenStack Neutron subnetpool onboarding authorization bypass](https://junglewise.ai/threats/cve-2026-55707-openstack-neutron-subnetpool-onboarding-authorization-bypass) (info, CVSS 6.5, published 5 Aug 2026) - [CVE-2026-66139: OpenStack Zaqar authentication bypass via EXTRA-SPEC header](https://junglewise.ai/threats/cve-2026-66139-openstack-zaqar-authentication-bypass-via-extra-spec-header) (medium, CVSS 4.8, published 24 Jul 2026) - [CVE-2026-54423: OpenStack Ironic RBAC bypass in IPMI raw command execution](https://junglewise.ai/threats/cve-2026-54423-openstack-ironic-rbac-bypass-in-ipmi-raw-command-execution) (high, CVSS 8.2, published 10 Jul 2026) - [CVE-2026-44918: OpenStack Ironic missing authorization in cross-project node operations](https://junglewise.ai/threats/cve-2026-44918-openstack-ironic-missing-authorization-in-cross-project-node) (medium, CVSS 5.5, published 10 Jul 2026) - [CVE-2024-7319: PYSEC-2026-1750 - openstack-heat may disclose sensitive information](https://junglewise.ai/threats/cve-2024-7319-openstack-heat-sensitive-information-disclosure-in-stack-abandon) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2022-47950: PYSEC-2026-927 - OpenStack Swift XML external entities (XXE) Injection](https://junglewise.ai/threats/cve-2022-47950-openstack-swift-xxe-injection-in-s3-api) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2013-4497: PYSEC-2026-859 - OpenStack Compute Nova Improper Access Control](https://junglewise.ai/threats/cve-2013-4497-openstack-compute-nova-improper-access-control-in-xenapi-backend) (info, published 6 Jul 2026) ## Most severe OpenStack vulnerabilities - [CVE-2026-41283: OpenStack Mistral remote code execution via policy bypass](https://junglewise.ai/threats/cve-2026-41283-openstack-mistral-remote-code-execution-via-policy-bypass) (critical, CVSS 9.9, published 4 Jun 2026) - [CVE-2026-22797: OpenStack keystonemiddleware privilege escalation via identity header spoofing](https://junglewise.ai/threats/cve-2026-22797-openstack-keystonemiddleware-privilege-escalation-via-identity) (critical, CVSS 9.9, published 19 Jan 2026) - [CVE-2026-71195: OpenStack Manila cross-project authorization bypass on public shares](https://junglewise.ai/threats/cve-2026-71195-in-openstack-manila-before-23-0-1-multiple-manila-api-operations) (critical, CVSS 9.9, published 21 Oct 2026) - [CVE-2026-115642: OpenStack keystonemiddleware access rules bypass via X-Service-Token](https://junglewise.ai/threats/cve-2026-115642-in-openstack-keystonemiddleware-before-13-0-2-by-supplying-a) (high, CVSS 8.3, published 30 Oct 2026) - [CVE-2026-54423: OpenStack Ironic RBAC bypass in IPMI raw command execution](https://junglewise.ai/threats/cve-2026-54423-openstack-ironic-rbac-bypass-in-ipmi-raw-command-execution) (high, CVSS 8.2, published 10 Jul 2026) - [CVE-2026-51773: OpenStack glance_store credential leak in VMware datastore driver](https://junglewise.ai/threats/cve-2026-51773-an-issue-in-the-vmware-datastore-driver-of-openstack-glance-store) (high, CVSS 8.1, published 25 Sep 2026) - [CVE-2026-43003: OpenStack Ironic Python Agent command injection via malicious image](https://junglewise.ai/threats/cve-2026-43003-openstack-ironic-python-agent-command-injection-via-malicious) (high, CVSS 8, published 1 May 2026) - [CVE-2026-42997: OpenStack Ironic Credential Forwarding in iDRAC Configuration Molds](https://junglewise.ai/threats/cve-2026-42997-openstack-ironic-credential-forwarding-in-idrac-configuration) (high, CVSS 7.7, published 5 May 2026) - [CVE-2026-44393: OpenStack oslo.messaging TLS hostname verification failure in RabbitMQ driver](https://junglewise.ai/threats/cve-2026-44393-openstack-oslo-messaging-tls-hostname-verification-failure-in) (high, CVSS 7.4, published 4 Jun 2026) - [CVE-2026-40213: OpenStack Cyborg incorrect authorization in multiple API endpoints](https://junglewise.ai/threats/cve-2026-40213-openstack-cyborg-incorrect-authorization-in-multiple-api) (high, CVSS 7.4, published 7 May 2026) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, down 25% on the four before (8). 1 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 2 | 0 | 0 | | 21 Sep 2026 | 6 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 5 | 1 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## OpenStack technologies - [OpenStack Ironic](https://junglewise.ai/threats/technologies/ironic): 17 vulnerabilities - [OpenStack Neutron](https://junglewise.ai/threats/technologies/neutron): 5 vulnerabilities - [OpenStack Swift](https://junglewise.ai/threats/technologies/swift): 4 vulnerabilities - [OpenStack Octavia](https://junglewise.ai/threats/technologies/octavia): 3 vulnerabilities - [OpenStack Glance](https://junglewise.ai/threats/technologies/openstack-glance): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "OpenStack vulnerabilities", https://junglewise.ai/threats/vendors/openstack, 13 November 2026.