PT-2026-44466 · Openstack+2 · Openstack Keystone+2

Erichen · CVE-2026-44394 · Published 2026-05-28 · Updated 2026-06-16

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions prior to 29.0.2

Description The federated token rescoping mechanism fails to propagate the original token's expiry to the newly issued token. When a federated user rescopes a token through the 'POST /v3/auth/tokens' endpoint, the handle scoped token() function in the mapped authentication plugin returns response data lacking an expires at value. Consequently, the token provider issues a token with a fresh default Time To Live (TTL). This allows users to maintain indefinite access by repeatedly rescoping tokens before they expire, bypassing configured token lifetime policies. This issue only affects deployments utilizing federated identity, such as SAML2 or OpenID Connect.

Recommendations Update to version 29.0.2 or later.

Exploit

Fix

DoS

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-44394

GHSA-WHQR-FGM5-X77Q

PYSEC-2026-603

USN-8433-1

Affected Products

Linuxmint

Openstack Keystone

Ubuntu

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44394.json · Exploit
• https://security.openstack.org/ossa/OSSA-2026-015.html · Patch
• https://bugs.launchpad.net/keystone/+bug/2150379 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-44394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40683 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-44394 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-44394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42998 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-44394 · Security Note
• https://ubuntu.com/security/CVE-2026-42999 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8433-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8433-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-44394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33551 · Vendor Advisory