Skip to content
OpenAdvisories

Product · OpenStack

Cyborg

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-40214

    OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer

    In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL for every ARQ), database queries have no project filtering, and policy checks …

    OpenStack Cyborg cyborg openstack-cyborg Debian Ubuntu PyPI