CVE-2026-115642
HIGH
NVD
CVSS Score
8.3
Severity
HIGH
Published
Oct 30, 2026
Vendor
unknown
Description
In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.