Skip to content
OpenAdvisories

Product · OpenStack

Neutron

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.2
    CVE-2026-50266

    OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

    In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies in…

    OpenStack Neutron neutron neutron Debian Ubuntu PyPI