Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Keystone — Vulnerabilities & Security Advisories 23

All 23 CVE vulnerabilities found in Keystone, with AI-generated Chinese analysis, references, and POCs.

This page aggregates all known security vulnerabilities affecting the Keystone identity service product developed by the OpenStack vendor, categorized primarily by software weakness types and tagged with relevant security identifiers. The collection encompasses a comprehensive history of reported flaws, ranging from early authentication bypasses and privilege escalation issues to recent injection vulnerabilities and configuration errors discovered over the past decade. Visitors can utilize this resource to track official vendor advisories for timely patching, analyze the evolution of specific weakness classes within the identity management domain, or review the complete vulnerability history of the Keystone product to assess long-term security posture. The data presented here serves as a centralized reference for security analysts, system administrators, and researchers seeking to understand the risk landscape associated with this critical infrastructure component without needing to consult disparate sources. By consolidating these findings, the page facilitates efficient impact analysis and supports proactive defense strategies against known threats targeting the Keystone service architecture. All entries are organized chronologically and by severity to aid in prioritizing remediation efforts across enterprise deployments.

Vendor: keystone

CVE ID Title CVSS Severity Published
CVE-2026-90460 OpenStack Keystone 授权问题漏洞 CWE-863 7.6 High 2026-09-11
CVE-2026-80183 OpenStack Keystone 缓冲区错误漏洞 CWE-843 7.1 High 2026-08-26
CVE-2026-80184 OpenStack keystone 授权问题漏洞 CWE-863 7.6 High 2026-08-25
CVE-2026-80182 OpenStack Keystone 授权问题漏洞 CWE-863 7.6 High 2026-08-25
CVE-2026-63421 Keystone: `graphql.maxTake` bypass with negative `take` CWE-20 7.5 High 2026-08-21
CVE-2026-10802 keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption CWE-400 4.3 Medium 2026-06-04
CVE-2026-44394 OpenStack Keystone 安全漏洞 CWE-863 6.0 Medium 2026-05-28
CVE-2026-43000 OpenStack Keystone 安全漏洞 CWE-863 6.0 Medium 2026-05-28
CVE-2026-42999 OpenStack Keystone 安全漏洞 CWE-863 6.0 Medium 2026-05-28
CVE-2026-42998 OpenStack Keystone 安全漏洞 CWE-863 6.0 Medium 2026-05-28
CVE-2026-43001 OpenStack Keystone 安全漏洞 CWE-863 7.9 High 2026-05-01
CVE-2026-40683 OpenStack Keystone 安全漏洞 CWE-843 7.7 High 2026-04-14
CVE-2026-33551 OpenStack Keystone 安全漏洞 CWE-863 3.5 Low 2026-04-10
CVE-2026-33326 @keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany CWE-863 4.3 Medium 2026-03-24
CVE-2025-65073 Keystone 安全漏洞 CWE-863 7.5 High 2025-11-17
CVE-2025-46720 Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields CWE-203 3.1 Low 2025-05-05
CVE-2023-40027 Conditionally missing authorization in @keystone-6/core CWE-862 3.7 Low 2023-08-15
CVE-2023-34247 @keystone-6/auth Open Redirect vulnerability CWE-601 6.1 Medium 2023-06-13
CVE-2022-39382 NODE_ENV in Keystone defaults to development with esbuild CWE-74 9.8 Critical 2022-11-03
CVE-2022-39322 @keystone-6/core vulnerable to field-level access-control bypass for multiselect field CWE-285 9.1 Critical 2022-10-25
CVE-2021-3563 Red Hat OpenStack Platform 安全漏洞 CWE-863 7.4 - 2022-08-26
CVE-2012-1572 OpenStack Keystone 资源管理错误漏洞 7.5 - 2019-11-12
CVE-2013-2255 OpenStack Keystone和OpenStack Compute 信任管理问题漏洞 5.9 - 2019-11-01

All 23 known CVE vulnerabilities affecting Keystone with full Chinese analysis, references, and POCs where available.