High severity8.3NVD Advisory· Published Oct 30, 2026

CVE-2026-115642

Description

In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2026/10/29/2nvd
bugs.launchpad.net/keystonemiddleware/+bug/2162748nvd
github.com/openstack/keystonemiddleware/tagsnvd
www.openwall.com/lists/oss-security/2026/10/29/2nvd

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000