OpenStack vulnerabilities and fixes

CVEs that mention OpenStack, ranked by priority. 15 tracked.

OpenStack has 15 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-10-23. Highest priority: CVE-2026-71190 (score 50/100).

• CVE-2026-71190 HIGH 8.7 In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnera
• CVE-2026-71193 CRITICAL 9.6 In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone
• CVE-2026-71195 CRITICAL 9.9 In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the call
• CVE-2026-71194 MEDIUM 6.8 In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queri
• CVE-2026-66138 HIGH 7.2 In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbit
• CVE-2026-55707 HIGH 7.1 In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subn
• CVE-2026-71191 MEDIUM 6.0 In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered
• CVE-2026-66139 MEDIUM 4.8 OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.
• CVE-2026-71192 MEDIUM 6.0 In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy
• CVE-2026-90458 MEDIUM 5.4 OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BM
• CVE-2026-89419 MEDIUM 5.0 OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH t
• CVE-2026-71201 MEDIUM 5.0 In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgro
• CVE-2026-93856 MEDIUM 4.3 In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API
• CVE-2026-54422 MEDIUM 5.5 In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-pytho
• CVE-2026-115638 MEDIUM 4.3 OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amou

FAQ

How do I fix OpenStack vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is OpenStack being exploited right now?

None of the tracked OpenStack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which OpenStack CVE should I patch first?

CVE-2026-71190 currently ranks highest (50/100): In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnera.

← Back to latest CVEs