Cyber ·
OpenStack: alert on an access_rules bypass
Alert OSSA-2026-050, published on October 29, 2026, reports CVE-2026-115642: an access_rules bypass in OpenStack keystonemiddleware via X-Service-Token.
Security alert OSSA-2026-050, published on October 29, 2026, describes CVE-2026-115642, concerning an access_rules bypass in OpenStack keystonemiddleware via the X-Service-Token header. The feed lists versions 10.10.0, 11.0.0, and 13.0.0 as affected. The available excerpt provides no further technical details and does not state a fix or mitigation; it is not enough to determine the impact on or exposure of a particular deployment.
To verify the issue, consult the original OSSA-2026-050 advisory and check its complete version details and guidance before deciding on any action. If you use AI to analyze the advisory or internal documentation, apply your organization’s policy to personal data and secrets; do not include tokens, credentials, or sensitive configurations.