Keystonemiddleware (<10.9.2, >=10.10.0 <10.12.2, >=11.0.0 <12.0.1, >=13.0.0 <13.0.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/keystonemiddleware-10.9.2-10.10.0-10.12.2-11.0.0-12.0.1-13.0.0-13.0.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 15:29:07 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOpenStack keystonemiddleware: Access control bypass via X-Service-Token (CVE-2026-115642)https://feed.craftedsignal.io/briefs/2026-10-openstack-keystonemiddleware-bypass/Thu, 29 Oct 2026 15:29:07 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-openstack-keystonemiddleware-bypass/A vulnerability in OpenStack keystonemiddleware allows attackers to bypass access_rules using a malicious X-Service-Token, resulting in unauthorized access to restricted resources.A vulnerability (CVE-2026-115642) exists in the OpenStack keystonemiddleware component. The flaw allows an attacker to bypass established access_rules by manipulating the X-Service-Token header, leading to unauthorized access to restricted resources. Affected versions include those <10.9.2, 10.10.0-10.12.1, 11.0.0-12.0.0, and 13.0.0-13.0.1.

Impact

Successful exploitation allows for the bypass of access control restrictions, potentially exposing sensitive OpenStack service resources to unauthorized entities.

Recommendation

  • Upgrade OpenStack keystonemiddleware to a patched version (>=10.9.2, >=10.12.2, >=12.0.1, or >=13.0.2).
  • Review OpenStack logs for requests containing anomalous X-Service-Token headers targeting sensitive endpoints.
]]>highadvisory