Shell Metacharacter Vulnerability in OpenStack Horizon by OpenStack

CVE-2026-55748

What is CVE-2026-55748?

OpenStack Horizon prior to version 25.7.4 contains a vulnerability that allows for crafted project names containing shell metacharacters. This could potentially lead to unintended command execution, highlighting a need for careful validation of user inputs. Some experts argue that this issue can be viewed as a security hardening measure against advanced user errors, rather than a typical security vulnerability.

References