Privilege Escalation Vulnerability in OpenStack Keystone by Vendor OpenStack

CVE-2026-43000

What is CVE-2026-43000?

A vulnerability identified in OpenStack Keystone allows attackers with member roles to escalate privileges to administrator roles. By leveraging unrestricted application credentials alongside Keystone trust mechanisms, an attacker can manipulate victim tokens, gaining unauthorized access to admin functionalities. This process enables the creation of persistent trusts that can grant the attacker ongoing administrative access, which is auditable under the victim's identity. This vulnerability particularly poses risks in multitenant environments, where trust and role delegation are critical for maintaining security.

References