Skip to content

PatchFirst · Latest vulnerabilities

openstack vulnerabilities

Vulnerabilities published for openstack in the last 30 days: 0. Listed in the KEV catalogue: 0.

Vulnerabilities: 3

CVE-2026-42510
Medium · CVSS 6.6EPSS 0.74%No fix published
CVE-2026-42510
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.
openstack Operating systems
Published April 28, 2026Updated August 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-3261
Medium · CVSS 4.4EPSS 0.29%No fix published
Plain-text passwords saved in /var/log/messages
A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack overcloud update run, leading to a disclosure of sensitive information problem.
openstack Operating systems
Published September 15, 2023Updated September 25, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-38065
High · CVSS 8.8EPSS 0.62%No fix published
CVE-2022-38065
A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.
openstack Operating systems
Published December 21, 2022Updated April 15, 2025
Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →