OpenStack Vitrage vulnerabilities (CVE)

CVE records published for OpenStack Vitrage, newest first. Follow to get an email when a new one appears.

1 results

9.1Critical

CVE-2026-28370 8 months ago

OpenStack Vitrage

In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host as the user the Vitrage service runs under. This may result in unauthorized acc…