Skip to content
OpenAdvisories

Package · Debian

vitrage

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-28370

    OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection

    In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host as the user the Vitrage service runs under. This may result in unauthorized acc…

    OpenStack Vitrage vitrage vitrage Debian Ubuntu PyPI