OpenStack Aodh vulnerabilities (CVE)

CVE records published for OpenStack Aodh, newest first. Follow to get an email when a new one appears.

1 results

8.4High

CVE-2026-76878 2 months ago

OpenStack Aodh

In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_projects key rather than its value; a true value enforces the administrator-only pol…