https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-44394.htmlhttps://patchthecve.com/cve/CVE-2026-44394.htmlMon, 26 Oct 2026 13:10:00 +0000MEDIUM 6.0: An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via POST /v3/auth/tokens, the handle_scoped_token() function in the mapped auhttps://patchthecve.com/cve/CVE-2026-43000.htmlhttps://patchthecve.com/cve/CVE-2026-43000.htmlMon, 26 Oct 2026 13:10:00 +0000MEDIUM 6.0: An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with the member role on a project can escalate to admin by chaining unrestricted application credentials with Keystone trusts. The impersonated token carhttps://patchthecve.com/cve/CVE-2026-42999.htmlhttps://patchthecve.com/cve/CVE-2026-42999.htmlMon, 26 Oct 2026 13:10:00 +0000MEDIUM 6.0: An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditionally merges the raw JSON request body into the policy enforcement dictionary via policy_dict.update(json_input.copy()), overwriting trusted target data that was previously set frhttps://patchthecve.com/cve/CVE-2026-42998.htmlhttps://patchthecve.com/cve/CVE-2026-42998.htmlMon, 26 Oct 2026 13:10:00 +0000MEDIUM 6.0: An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the owner of the application credential. An attacker can authenticate with their own application credenthttps://patchthecve.com/cve/CVE-2026-43001.htmlhttps://patchthecve.com/cve/CVE-2026-43001.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.9: An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an EC2-type credential matched the project of the authenticating application credential. This allowed an attacker holding an unrestricted application credential https://patchthecve.com/cve/CVE-2026-33551.htmlhttps://patchthecve.com/cve/CVE-2026-33551.htmlMon, 26 Oct 2026 22:10:00 +0000LOW 3.5: An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role ma