PT-2026-50448 · Openstack · Horizon

Publicado 2026-06-17 · Atualizado 2026-06-17 · CVE-2026-55748

Mitre

CVSS v3.1

6.0

Média

Vetor base

AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-55748

Produtos afetados

Horizon

Referências · 2

• https://launchpad.net/bugs/2152240 · Nota
• https://wiki.openstack.org/wiki/OSSN/OSSN-0097 · Nota