keystone vulnerabilities
Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. (CVE-2026-80182) It was discovered that OpenStack Keystone incorrectly handled role assignment queries under certain circumstances. An authenticated attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-80183) Tim Shephard discovered that OpenStack Keystone did not properly restrict reauthentication using delegated tokens. An authenticated attacker could possibly use this issue to escape their intended project scope and obtain unauthorized access. (CVE-2026-80184)
USN-8854-1
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:USN-8854-1
keystone
Source reference: /affected/0/package/name
- Affected versions
- 2:8.0.0-0ubuntu1
Source reference:
/affected/0/versions2:9.0.0~b1-0ubuntu1Source reference:
/affected/0/versions2:9.0.0~b2-0ubuntu1Source reference:
/affected/0/versions2:9.0.0~b3-0ubuntu1Source reference:
/affected/0/versions2:9.0.0~rc1-0ubuntu1Source reference:
/affected/0/versions2:9.0.0-0ubuntu1Source reference:
/affected/0/versions2:9.0.2-0ubuntu1Source reference:
/affected/0/versions2:9.0.2-0ubuntu2Source reference:
/affected/0/versions2:9.1.0-0ubuntu1Source reference:
/affected/0/versions2:9.2.0-0ubuntu1Source reference:
/affected/0/versions2:9.3.0-0ubuntu1Source reference:
/affected/0/versions2:9.3.0-0ubuntu2Source reference:
/affected/0/versions2:9.3.0-0ubuntu3Source reference:
/affected/0/versions2:9.3.0-0ubuntu3.1Source reference:
/affected/0/versions2:9.3.0-0ubuntu3.2Source reference:
/affected/0/versions - Fixed versions
- 2:9.3.0-0ubuntu3.2+esm2
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
keystone
Source reference: /affected/1/package/name
- Affected versions
- 2:12.0.0-0ubuntu1
Source reference:
/affected/1/versions2:13.0.0~b1-0ubuntu1Source reference:
/affected/1/versions2:13.0.0~b2-0ubuntu1Source reference:
/affected/1/versions2:13.0.0~b3-0ubuntu1Source reference:
/affected/1/versions2:13.0.0~rc1-0ubuntu1Source reference:
/affected/1/versions2:13.0.0~rc2-0ubuntu1Source reference:
/affected/1/versions2:13.0.0-0ubuntu1Source reference:
/affected/1/versions2:13.0.1-0ubuntu1Source reference:
/affected/1/versions2:13.0.2-0ubuntu1Source reference:
/affected/1/versions2:13.0.2-0ubuntu3Source reference:
/affected/1/versions2:13.0.4-0ubuntu1Source reference:
/affected/1/versions - Fixed versions
- 2:13.0.4-0ubuntu1+esm1
Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
keystone
Source reference: /affected/2/package/name
- Affected versions
- 2:16.0.0-0ubuntu1
Source reference:
/affected/2/versions2:17.0.0~b1~git2019121613.db81fee63-0ubuntu1Source reference:
/affected/2/versions2:17.0.0~b2~git2020020513.99733f172-0ubuntu1Source reference:
/affected/2/versions2:17.0.0~b3~git2020032415.9f9040257-0ubuntu1Source reference:
/affected/2/versions2:17.0.0~b3~git2020032415.9f9040257-0ubuntu2Source reference:
/affected/2/versions2:17.0.0~b3~git2020041013.7bb6314e4-0ubuntu1Source reference:
/affected/2/versions2:17.0.0-0ubuntu0.20.04.1Source reference:
/affected/2/versions2:17.0.1-0ubuntu1Source reference:
/affected/2/versions2:17.0.1-0ubuntu2Source reference:
/affected/2/versions2:17.0.1-0ubuntu2+esm1Source reference:
/affected/2/versions - Fixed versions
- 2:17.0.1-0ubuntu2+esm2
Source reference:
/affected/2/ranges - Prerequisites
- Not stated in this record
keystone
Source reference: /affected/3/package/name
- Affected versions
- 2:20.0.0-0ubuntu1
Source reference:
/affected/3/versions2:20.0.0+git2021120815.2ddf8f321-0ubuntu1Source reference:
/affected/3/versions2:20.0.0+git2022011217.771c943ad-0ubuntu1Source reference:
/affected/3/versions2:20.0.0+git2022030313.a3fc9e7c3-0ubuntu1Source reference:
/affected/3/versions2:21.0.0-0ubuntu1Source reference:
/affected/3/versions2:21.0.1-0ubuntu1Source reference:
/affected/3/versions2:21.0.1-0ubuntu2Source reference:
/affected/3/versions2:21.0.1-0ubuntu2.1Source reference:
/affected/3/versions2:21.0.1-0ubuntu2.2Source reference:
/affected/3/versions2:21.0.1-0ubuntu2.4Source reference:
/affected/3/versions - Fixed versions
- 2:21.0.1-0ubuntu2.6
Source reference:
/affected/3/ranges - Prerequisites
- Not stated in this record
keystone
Source reference: /affected/4/package/name
- Affected versions
- 2:24.0.0-0ubuntu1
Source reference:
/affected/4/versions2:24.0.0+git2024011916.adfa92b4-0ubuntu1Source reference:
/affected/4/versions2:25.0.0~rc1-0ubuntu1Source reference:
/affected/4/versions2:25.0.0-0ubuntu1Source reference:
/affected/4/versions2:25.0.0-0ubuntu1.1Source reference:
/affected/4/versions2:25.0.0-0ubuntu1.2Source reference:
/affected/4/versions2:25.0.0-0ubuntu1.4Source reference:
/affected/4/versions - Fixed versions
- 2:25.0.0-0ubuntu1.6
Source reference:
/affected/4/ranges - Prerequisites
- Not stated in this record
keystone
Source reference: /affected/5/package/name
- Affected versions
- 2:28.0.0-0ubuntu1
Source reference:
/affected/5/versions2:28.0.0-0ubuntu2Source reference:
/affected/5/versions2:28.0.0+git20260119.61.8a42793e7-0ubuntu1Source reference:
/affected/5/versions2:29.0.0~rc1-0ubuntu1Source reference:
/affected/5/versions2:29.0.0-0ubuntu1Source reference:
/affected/5/versions2:29.0.0-0ubuntu1.2Source reference:
/affected/5/versions - Fixed versions
- 2:29.0.0-0ubuntu1.4
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:9.3.0-0ubuntu3.2+esm2"
}
]
}
],
"package": {
"name": "keystone",
"purl": "pkg:deb/ubuntu/keystone?arch=source&distro=esm-infra-legacy%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"2:8.0.0-0ubuntu1",
"2:9.0.0~b1-0ubuntu1",
"2:9.0.0~b2-0ubuntu1",
"2:9.0.0~b3-0ubuntu1",
"2:9.0.0~rc1-0ubuntu1",
"2:9.0.0-0ubuntu1",
"2:9.0.2-0ubuntu1",
"2:9.0.2-0ubuntu2",
"2:9.1.0-0ubuntu1",
"2:9.2.0-0ubuntu1",
"2:9.3.0-0ubuntu1",
"2:9.3.0-0ubuntu2",
"2:9.3.0-0ubuntu3",
"2:9.3.0-0ubuntu3.1",
"2:9.3.0-0ubuntu3.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8854-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-80182",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80184",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keystone",
"binary_version": "2:9.3.0-0ubuntu3.2+esm2"
},
{
"binary_name": "python-keystone",
"binary_version": "2:9.3.0-0ubuntu3.2+esm2"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:13.0.4-0ubuntu1+esm1"
}
]
}
],
"package": {
"name": "keystone",
"purl": "pkg:deb/ubuntu/keystone?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2:12.0.0-0ubuntu1",
"2:13.0.0~b1-0ubuntu1",
"2:13.0.0~b2-0ubuntu1",
"2:13.0.0~b3-0ubuntu1",
"2:13.0.0~rc1-0ubuntu1",
"2:13.0.0~rc2-0ubuntu1",
"2:13.0.0-0ubuntu1",
"2:13.0.1-0ubuntu1",
"2:13.0.2-0ubuntu1",
"2:13.0.2-0ubuntu3",
"2:13.0.4-0ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8854-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-80182",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80184",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:18.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keystone",
"binary_version": "2:13.0.4-0ubuntu1+esm1"
},
{
"binary_name": "python-keystone",
"binary_version": "2:13.0.4-0ubuntu1+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:17.0.1-0ubuntu2+esm2"
}
]
}
],
"package": {
"name": "keystone",
"purl": "pkg:deb/ubuntu/keystone?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2:16.0.0-0ubuntu1",
"2:17.0.0~b1~git2019121613.db81fee63-0ubuntu1",
"2:17.0.0~b2~git2020020513.99733f172-0ubuntu1",
"2:17.0.0~b3~git2020032415.9f9040257-0ubuntu1",
"2:17.0.0~b3~git2020032415.9f9040257-0ubuntu2",
"2:17.0.0~b3~git2020041013.7bb6314e4-0ubuntu1",
"2:17.0.0-0ubuntu0.20.04.1",
"2:17.0.1-0ubuntu1",
"2:17.0.1-0ubuntu2",
"2:17.0.1-0ubuntu2+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8854-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-80182",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80183",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80184",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:20.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keystone",
"binary_version": "2:17.0.1-0ubuntu2+esm2"
},
{
"binary_name": "keystone-common",
"binary_version": "2:17.0.1-0ubuntu2+esm2"
},
{
"binary_name": "python3-keystone",
"binary_version": "2:17.0.1-0ubuntu2+esm2"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:21.0.1-0ubuntu2.6"
}
]
}
],
"package": {
"name": "keystone",
"purl": "pkg:deb/ubuntu/keystone?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2:20.0.0-0ubuntu1",
"2:20.0.0+git2021120815.2ddf8f321-0ubuntu1",
"2:20.0.0+git2022011217.771c943ad-0ubuntu1",
"2:20.0.0+git2022030313.a3fc9e7c3-0ubuntu1",
"2:21.0.0-0ubuntu1",
"2:21.0.1-0ubuntu1",
"2:21.0.1-0ubuntu2",
"2:21.0.1-0ubuntu2.1",
"2:21.0.1-0ubuntu2.2",
"2:21.0.1-0ubuntu2.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8854-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-80182",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80183",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80184",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keystone",
"binary_version": "2:21.0.1-0ubuntu2.6"
},
{
"binary_name": "keystone-common",
"binary_version": "2:21.0.1-0ubuntu2.6"
},
{
"binary_name": "python3-keystone",
"binary_version": "2:21.0.1-0ubuntu2.6"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:25.0.0-0ubuntu1.6"
}
]
}
],
"package": {
"name": "keystone",
"purl": "pkg:deb/ubuntu/keystone?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2:24.0.0-0ubuntu1",
"2:24.0.0+git2024011916.adfa92b4-0ubuntu1",
"2:25.0.0~rc1-0ubuntu1",
"2:25.0.0-0ubuntu1",
"2:25.0.0-0ubuntu1.1",
"2:25.0.0-0ubuntu1.2",
"2:25.0.0-0ubuntu1.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8854-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-80182",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80183",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80184",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:24.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keystone",
"binary_version": "2:25.0.0-0ubuntu1.6"
},
{
"binary_name": "keystone-common",
"binary_version": "2:25.0.0-0ubuntu1.6"
},
{
"binary_name": "python3-keystone",
"binary_version": "2:25.0.0-0ubuntu1.6"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:29.0.0-0ubuntu1.4"
}
]
}
],
"package": {
"name": "keystone",
"purl": "pkg:deb/ubuntu/keystone?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2:28.0.0-0ubuntu1",
"2:28.0.0-0ubuntu2",
"2:28.0.0+git20260119.61.8a42793e7-0ubuntu1",
"2:29.0.0~rc1-0ubuntu1",
"2:29.0.0-0ubuntu1",
"2:29.0.0-0ubuntu1.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8854-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-80182",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80183",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-80184",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:26.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "keystone",
"binary_version": "2:29.0.0-0ubuntu1.4"
},
{
"binary_name": "keystone-common",
"binary_version": "2:29.0.0-0ubuntu1.4"
},
{
"binary_name": "python3-keystone",
"binary_version": "2:29.0.0-0ubuntu1.4"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #51977 · Revision 1
- Added to Heist Feed
- Publisher date