OpenStack — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Code Execution Vulnerability in Mistral Affects Multiple Ubuntu Releases

  A significant security vulnerability has been identified in Mistral, the OpenStack Workflow Service, affecting Ubuntu 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. Discovered by Eduardo Gonzalez Gutierrez and Arnaud…

  2 articles · Updated June 11, 2026
• Critical Vulnerabilities in OpenStack Keystone Affect Multiple Ubuntu Releases

  OpenStack Keystone has been found to have several critical vulnerabilities affecting Ubuntu versions 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS. Notably, CVE-2026-33551 allows authenticated attackers with reader roles…

  2 articles · Updated June 16, 2026
• OpenSSF Reports Growth and New Security Resources Amid Rising Cyber Threats

  On May 21, 2026, the Open Source Security Foundation (OpenSSF) announced the addition of five new members and the launch of new security resources during its Community Day in Minneapolis. The foundation aims to enhance…

  11 articles · Updated May 21, 2026
• Debian 11: Critical Local File Inclusion Vulnerabilities in Mistral Components

  Two local file inclusion vulnerabilities have been identified in Debian 11 bullseye affecting mistral-dashboard and python-mistralclient, both part of the OpenStack Workflow as a Service. These vulnerabilities may allow…

  2 articles · Updated December 1, 2025
• New Vulnerabilities Discovered in Major Software Platforms

  Cyble reported tracking 1128 new vulnerabilities recently, including critical flaws in Microsoft, VMware, Adobe, and ICS systems. Additionally, 1031 vulnerabilities were tracked last week, affecting Oracle, OpenStack,…

  2 articles · Updated January 28, 2026
• OpenStack Keystone Vulnerabilities Allow Unauthorized Access

  OpenStack Keystone has multiple vulnerabilities that could allow remote attackers to gain unauthorized access and escalate privileges. The issues include improper handling of ec2tokens and s3tokens APIs and insufficient…

  3 articles · Updated December 11, 2025
• Keystone Authentication Service Updates Released

  On June 16, 2026, multiple updates for the Keystone authentication service were published, addressing various versions including 2:29.0.0-0ubuntu1.2, 2:25.0.0-0ubuntu1.4, 2:28.0.0-0ubuntu1.3, and 2:21.0.1-0ubuntu2.4.…

  4 articles · Updated June 16, 2026
• Access Escalation Vulnerability in Ubuntu Keystone Middleware

  A vulnerability in the Keystone Middleware affects Ubuntu 25.10 and 24.04 LTS. Discovered by Grzegorz Grasza, the issue arises from improper sanitization of authentication headers, potentially allowing attackers to…

  2 articles · Updated February 3, 2026
• Multiple Ironic Package Versions Released for OpenStack

  On June 11, 2026, several new versions of the Ironic OpenStack project were released, including 1:24.1.1-0ubuntu1.3, 1:32.0.0-0ubuntu1.1, 1:20.1.0-0ubuntu1.3, and 1:35.0.0-0ubuntu2.1. These updates aim to enhance the…

  5 articles · Updated June 11, 2026

Recent Intelligence Reports

• 2:28.0.0-0ubuntu1.3 — launchpad.net · June 16, 2026
• USN-8433-1: OpenStack Keystone vulnerabilities — Ubuntu · June 16, 2026
• 1:35.0.0-0ubuntu2.1 — launchpad.net · June 11, 2026
• Ubuntu Mistral Important Code Execution Threat USN-8422 — Linuxsecurity · June 11, 2026
• OpenSSF Notes Quarter of Growth with New Members, Added AI Security Resources, and ... — Linuxfoundation · May 21, 2026
• Ubuntu 25.10 Keystone Middleware Important Access Escalation CVE-2026 — Linuxsecurity · February 3, 2026
• The Week in Vulnerabilities: Cyble Urges Oracle, OpenStack Fixes — Cyble · January 28, 2026
• Significant Vulnerabilities in OpenStack Keystone on Ubuntu 22.04 LTS — Linuxsecurity · December 11, 2025

Related Entities