OpenStack is a widely deployed open-source cloud infrastructure platform whose vulnerability footprint reflects the complexity of managing compute, storage, networking, and identity services across distributed systems. The exposure concentrates in core components such as Keystone (identity and access management), Nova (compute orchestration), Neutron (networking), and Horizon (dashboard), where the recurring weakness classes—information disclosure, cross-site scripting, input validation, and authorization flaws—are endemic to large, multi-tenant cloud APIs and web interfaces. A meaningful share of vulnerabilities affecting the platform reach serious severity, reflecting the high-value nature of cloud control planes and the downstream impact of compromised infrastructure credentials or orchestration logic. Defenders should treat OpenStack disclosures as infrastructure-critical and prioritize patching of internet-exposed services and identity components; live severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Openstack over time
Signals from CVEs in this vendor scope (292 CVEs).
292 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-18017CRITICAL The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-a | Jan 3, 2018 | 9.8 | 60 | NO | NO |
CVE-2021-3654MEDIUM A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL. | Mar 2, 2022 | 6.1 | 46 | NO | YES |
CVE-2026-54423HIGH In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI | Jul 10, 2026 | 8.2 | 38 | NO | NO |
CVE-2026-22797CRITICAL An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_to | Jan 19, 2026 | 9.9 | 38 | NO | NO |
CVE-2017-1000366HIGH glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code exe | Jun 19, 2017 | 7.8 | 37 | NO | YES |
CVE-2026-43003HIGH An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partit | May 1, 2026 | 7.5 | 35 | NO | NO |
CVE-2026-43001HIGH An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an EC2-type credential matched the projec | May 1, 2026 | 8.0 | 35 | NO | NO |
CVE-2017-16613CRITICAL An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhash | Nov 21, 2017 | 9.8 | 35 | NO | NO |
CVE-2026-48681HIGH OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image. | Jun 4, 2026 | 8.1 | 34 | NO | NO |
CVE-2026-46447HIGH OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info. | Jun 3, 2026 | 7.7 | 34 | NO | NO |
Signals from CVEs in this vendor scope (292 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Openstack.
Media articles that mention a CVE ID that affects a product developed by Openstack — matched by CVE ID, not by vendor name.