Description
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope. An authenticated user with zero role assignments can complete various actions such as reprogramming FPGA bitstreams on arbitrary compute nodes via agent RPC.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenStack | Cyborg | 5.0.0 – < 14.0.1, 15.0.0 – < 15.0.1, 16.0.0 – < 16.0.1 | 14.0.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cyborg | 16.0.0+git+2026.04.26.b8edfa06f1-1 | — |
| Debian 13 | cyborg | 14.0.0-3+deb13u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | cyborg | 16.0.0-2ubuntu0.1 | USN-8413-1 |
| Ubuntu 25.10 | cyborg | 14.0.0-3+deb13u1build0.25.10.1 | USN-8413-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | openstack-cyborg | < 16.0.1 | 16.0.1 | GHSA-mm7j-mhhj-hj36 |
Advisories 1
- USN-8413-1 cyborg vulnerabilities Ubuntu Security Notices (USN) · Jun 9, 2026