Port Vulnerability in OpenStack Neutron Affects Shared Networks

CVE-2026-50266

What is CVE-2026-50266?

In OpenStack Neutron versions before 28.0.1, a flaw exists that allows a project manager to create or modify a port on a shared network belonging to another project. This vulnerability is rooted in the default port Role-Based Access Control (RBAC) policies, which mistakenly included the PROJECT_MANAGER role without enforcing ownership checks for networks. As a result, project managers can exploit this oversight to achieve trusted network-service port behavior on shared networks, potentially bypassing essential security measures such as anti-spoofing controls, and enabling risks like DHCP, MAC, or IP spoofing attacks on other tenants. This issue represents a regression of a previous vulnerability addressed in CVE-2015-5240.

References