Is CVE-2026-115642 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-115642?

CVE-2026-115642 has a CVSS v3 severity of HIGH (8.3).

Back

CVE-2026-115642

Description

In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.