CVE-2012-5571Medium· 5.4▾ SunlitA flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) token…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
2.1%
A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.
openstack-keystone (all versions)openstack-keystone (all versions)redhat-user-workloads/openstack-keystone (all versions)openstack-keystone (all versions)redhat-user-workloads/openstack-keystone (all versions)openstack-keystone (all versions)redhat-user-workloads/openstack-keystone (all versions)openstack-keystone (all versions)redhat-user-workloads/openstack-keystone (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118947Medium· 4.3Keycloak-services: keycloak-services: authorization bypass via uma resource registration idor
CVE-2026-117574Critical· 9.1Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization
CVE-2024-1313Medium· 6.5grafana: vulnerable to authorization bypass (CVE-2024-1313)
CVE-2026-114690Medium· 6.2Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
CVE-2026-114691Medium· 5.9Gcc: integer wrap in `std
CVE-2026-110133Medium· 5.8Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback