Vulnerability Description
In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://bugs.launchpad.net/keystonemiddleware/+bug/2162748
- https://github.com/openstack/keystonemiddleware/tags
- https://www.openwall.com/lists/oss-security/2026/10/29/2
- http://www.openwall.com/lists/oss-security/2026/10/29/2
FAQ
What is CVE-2026-115642?
CVE-2026-115642 is a vulnerability with a CVSS score of 8.3 (HIGH). In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restricti...
How severe is CVE-2026-115642?
CVE-2026-115642 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-115642?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.