Skip to content
OpenAdvisories

Product · OpenStack

Neutron

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-49299

    OpenStack Neutron has an Incorrect Authorization issue

    In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a pr…

    OpenStack Neutron neutron neutron Debian Ubuntu PyPI