Known Vulnerabilities for products from OpenStack
Listed below are 20 of the newest known vulnerabilities associated with the vendor "OpenStack".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-97404 json | Not Provided | 2026-09-24 | 2026-09-26 | |
| CVE-2026-97149 json | Not Provided | 2026-09-24 | 2026-09-24 | |
| CVE-2026-94572 json | Not Provided | 2026-09-21 | 2026-09-24 | |
| CVE-2026-94571 json | Not Provided | 2026-09-21 | 2026-09-22 | |
| CVE-2026-93854 json | Not Provided | 2026-09-18 | 2026-09-22 | |
| CVE-2026-93852 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-90461 json | Not Provided | 2026-09-11 | 2026-09-14 | |
| CVE-2026-90460 json | Not Provided | 2026-09-11 | 2026-09-14 | |
| CVE-2026-80184 json | Not Provided | 2026-08-25 | 2026-08-26 | |
| CVE-2026-80183 json | Not Provided | 2026-08-27 | 2026-08-27 | |
| CVE-2026-55748 json | OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with ... | Not Provided | 2026-06-17 | 2026-09-22 |
| CVE-2026-50589 json | In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints ... | Not Provided | 2026-06-05 | 2026-07-23 |
| CVE-2026-50221 json | In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, ... | Not Provided | 2026-06-23 | 2026-06-29 |
| CVE-2026-49017 json | In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked... | Not Provided | 2026-05-27 | 2026-09-24 |
| CVE-2026-48681 json | OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO ima... | Not Provided | 2026-06-04 | 2026-07-22 |
| CVE-2026-46448 json | In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placem... | Not Provided | 2026-06-16 | 2026-06-26 |
| CVE-2026-46447 json | OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or nod... | Not Provided | 2026-06-03 | 2026-07-22 |
| CVE-2026-44919 json | In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur v... | Not Provided | 2026-05-14 | 2026-06-17 |
| CVE-2026-44917 json | OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic co... | Not Provided | 2026-06-04 | 2026-07-22 |
| CVE-2026-44916 json | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without ... | Not Provided | 2026-05-08 | 2026-06-18 |
Known software with vulnerabilities from OpenStack
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Openstack | Blazar-dashboard | 0.3.0 |
| Application | Openstack | Ceilometer | 0.1 |
| Application | Openstack | Cinder | 10.0.0 |
| Operating System | Openstack | Cinder | 10.0.0 |
| Application | Openstack | Compute | - |
| Application | Openstack | Devstack | - |
| Application | Openstack | Diablo | 2011.3 |
| Application | Openstack | Essex | 2012.1 |
| Application | Openstack | Folsom | - |
| Application | Openstack | Glance | 0.1.7 |
| Application | Openstack | Grizzly | 2013.1 |
| Application | Openstack | Havana | 2013.2.1 |
| Application | Openstack | Heat | 2013.2 |
| Application | Openstack | Horizon | 10.0.1 |
| Application | Openstack | Icehouse | - |
| Application | Openstack | Image Registry And Delivery Service Glance | - |
| Application | Openstack | Ironic | 4.2.0 |
| Application | Openstack | Ironic-inspector | - |
| Application | Openstack | Juno | 2014.2 |
| Application | Openstack | Keystone | - |