Browse all 77 CVE security advisories affecting OpenStack. AI-powered Chinese analysis, POCs, and references for each vulnerability.
OpenStack is an open-source cloud computing platform primarily used for building and managing private and public clouds. Historically, it has been susceptible to various vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, with 20 CVEs currently documented. The platform's complex, modular architecture introduces multiple attack surfaces. Notable security characteristics include its extensive permission model and isolation mechanisms, though misconfigurations remain a common risk. While no major public security incidents have been widely reported, the platform's widespread adoption in enterprise environments makes it a persistent target for attackers seeking to exploit vulnerabilities in its core services and APIs.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-94572 | OpenStack Octavia 18.0.1前Amphora驱动TLS配置注入漏洞 — Octavia CWE-94 | 9.4 | Critical | 2026-09-21 |
| CVE-2026-94571 | OpenStack Octavia <18.0.1 L7配置注入漏洞 — Octavia CWE-94 | 9.4 | Critical | 2026-09-21 |
| CVE-2026-74248 | OpenStack octavia 授权问题漏洞 — Octavia CWE-863 | 4.3 | Medium | 2026-08-14 |
This page lists every published CVE security advisory associated with OpenStack. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.