CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
- CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N - EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-25)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hcqg-5g63-7j9h | PyPI | keystone | <26.0.1 | 26.0.1 |
| GHSA-hcqg-5g63-7j9h | PyPI | keystone | >=27.0.0.0rc1 <27.0.0 | 27.0.0 |
| GHSA-hcqg-5g63-7j9h | PyPI | keystone | >=28.0.0.0rc1 <28.0.0 | 28.0.0 |
| PYSEC-2026-1490 | PyPI | keystone | <26.0.1 >=27.0.0.0rc1 <27.0.0 >=28.0.0.0rc1 <28.0.0 | 26.0.1, 27.0.0, 28.0.0 |