Red Hat Security AdvisoryRHSA-2026:1958
Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update
Released 2026-02-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenStack Services on OpenShift 18.0 openstack-keystone-1:23.0.3-18.0.20241202141842.9e3dfb4.el9ost, python3-keystone-1:23.0.3-18.0.20241202141842.9e3dfb4.el9ost
Fixes 1 record
Priority LOW 32
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00243 · Published 2025-11-17 · Partial fix · 26.0.1, 27.0.0 +1 CWE-863
