Cross-Project Credential Vulnerability in OpenStack Keystone
CVE-2026-43001

7.9HIGH

Key Information:

Vendor

Openstack
Status
Keystone
Vendor
CVE Published:
1 May 2026

What is CVE-2026-43001?

A security flaw in OpenStack Keystone versions 13 through 29 allows attackers with unrestricted application credentials for one project to create EC2 credentials intended for a different project. This vulnerability occurs due to insufficient validation of the caller-supplied project_id during the credentials request process. This enables an attacker to obtain a Keystone token scoped to a different project, facilitating unauthorized access and lateral movement across projects within the owner’s role permissions.

Affected Version(s)

Keystone 13 <= 29

References

https://bugs.launchpad.net/keystone/+bug/2149775
https://review.opendev.org/c/openstack/keystone/+/985804

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.