redhat/python-keystonemiddleware vulnerabilities

Latest redhat/python-keystonemiddleware CVEs

Newest publication first

1. CVE-2026-115642 keystonemiddleware: keystonemiddleware: application credential access_rules bypass via X-Service-Token header presence check

   Published 2026-10-30

   High·CVSS 8.3

   In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.