Skip to content
OpenAdvisories

Product · OpenStack

Horizon

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-55748

    OpenStack Horizon RC file generation does not escape special characters in project names

    OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a …

    OpenStack Horizon horizon horizon Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2026-43002

    OpenStack Horizon has Incorrect Behavior Order

    An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 …

    OpenStack Horizon horizon horizon Debian Ubuntu PyPI