CVE-2026-2035364

{}

{}

{}

{"acknowledgement": "Upstream acknowledges Grzegorz Grasza (Red Hat) and Tim Shephard (roiai.ca) as the original reporters.", "bugzilla": {"description": "keystone: keystone: Delegated token scope restrictions not consistently enforced across trust, OAuth1, and application credential endpoints", "id": "2517801", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517801"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-863", "details": ["A flaw was found in OpenStack Keystone where delegation boundary enforcement is incomplete across trust, application credential, and OAuth1 authorization endpoints. Tokens obtained via delegated authentication methods, such as OAuth1 access tokens or custom Keystone authentication plugins, can perform operations beyond their intended scope because endpoint guards only recognized specific delegation types rather than using a comprehensive allowlist. This allows creating trusts that delegate roles beyond the token's authorized scope, creating persistent application credentials, and authorizing new OAuth1 delegations. These derived credentials persist independently and survive revocation of the original credential, enabling an attacker with a compromised narrow-scope credential to escalate to the user's full privileges and maintain persistent access."], "mitigation": {"lang": "en:us", "value": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n1. If OAuth1 authentication is not required, remove 'oauth1' from the [auth] methods configuration option in keystone.conf.\n2. Restrict access to the Keystone API to trusted networks via firewall rules.\n3. Review and rotate application credentials, trusts, and OAuth1 access tokens after a suspected compromise."}, "name": "CVE-2026-2035364", "package_state": [{"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Affected", "package_name": "openstack-keystone", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:17.1", "fix_state": "Affected", "package_name": "openstack-keystone", "product_name": "Red Hat OpenStack Platform 17.1"}, {"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Affected", "package_name": "openstack-keystone", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-08-25T15:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-2035364\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-2035364\nhttps://launchpad.net/bugs/2153453\nhttps://review.opendev.org/c/openstack/keystone/+/1002301"], "statement": "This vulnerability is rated as Important because an authenticated user with a limited-scope delegated credential, such as an OAuth1 access token or application credential, can escalate to the underlying user's full role set and create persistent trusts or application credentials that survive revocation of the original credential. Exploitation requires a valid delegated credential, which a project member can typically create. The Keystone API is network-accessible. Red Hat OpenStack Platform 16.2, 17.1, and 18.0 (including RHOSO) ship the openstack-keystone package and contain the incomplete trust, application credential, and OAuth1 guards. After the update, custom Keystone authentication plugins cannot mint new delegations unless the operator adds them to [auth] additional_primary_auth_methods. Without that setting, Horizon project switching can break for those logins. A separately identified weakness in EC2 credential authentication is outside the scope of this advisory's comprehensive fix and is being documented by upstream as residual exposure. Client libraries such as python-keystoneclient, python-keystoneauth1, and python-keystonemiddleware do not contain the vulnerable Keystone server code and are not affected.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 75.0, "confidence_source": "inferred", "scores": [{"score": 75.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "keystone", "vendor": "openstack"}], "created": "2026-08-26T01:30:16.449751+00:00", "updated": "2026-08-26T02:15:16.661270+00:00", "vendors": ["openstack", "openstack$PRODUCT$keystone"]}