CVE-2026-22797

9.9 criticalEPSS 0.7%

Critical (9.9). EPSS 0.7% chance of exploitation in the next 30 days.

An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_token middleware fails to sanitize incoming authentication headers before processing OAuth 2.0 tokens. By sending forged identity headers such as X-Is-Admin-Project, X-Roles, or X-User-Id, an authenticated attacker may escalate privileges or impersonate other users. All deployments using the external_oauth2_token middleware are affected.

Severity

CVSS 3.1

9.9 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-290
Published: 2026-01-19
Modified: 2026-09-10
Record from: the NVD, synced 2026-10-19

References

https://launchpad.net/bugs/2129018
https://www.openwall.com/lists/oss-security/2026/01/16/9
http://www.openwall.com/lists/oss-security/2026/01/15/1
http://www.openwall.com/lists/oss-security/2026/01/16/2
http://www.openwall.com/lists/oss-security/2026/01/16/3

Check your stack JSON