Description
An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nova | 2:20.1.1-1 | — |
| Debian 13 | nova | 2:20.1.1-1 | — |
| Debian 12 | nova | 2:20.1.1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | nova | 2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1 | USN-5866-1 |
| Ubuntu 18.04 LTS | nova | 2:17.0.13-0ubuntu5.3 | USN-5866-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | nova | 2:13.1.4-0ubuntu4.5+esm1 | USN-5866-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | nova | < 18.2.4 | 18.2.4 | GHSA-22jm-4hxw-35jf |
| PyPI | nova | >= 19.0.0, < 19.1.0 | 19.1.0 | GHSA-22jm-4hxw-35jf |
| PyPI | nova | >= 20.0.0, < 20.1.0 | 20.1.0 | GHSA-22jm-4hxw-35jf |
| PyPI | nova | < 18.2.4 · >= 19.0.0, < 19.1.0 · >= 20.0.0, < 20.1.0 | 18.2.4, 19.1.0, 20.1.0 | PYSEC-2026-857 |
Advisories 1
- USN-5866-1 nova vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026