Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Red Hat OpenStack Platform 16.2 - Unauthenticated API Access

published 21 days ago
Summary

Red Hat OpenStack Platform 16.2 has an issue with its API that allows unauthorized users to access certain features. This could allow an attacker to perform actions without proper authorization, potentially leading to security breaches. You should update to the latest version to fix this vulnerability.

What to do
  • Update redhat collectd-sensubility to version 0:0.2.1-1.1.el8ost.
  • Update redhat collectd-sensubility-debuginfo to version 0:0.2.1-1.1.el8ost.
  • Update redhat etcd to version 0:3.3.23-22.el8ost.
  • Update redhat etcd-debuginfo to version 0:3.3.23-22.el8ost.
  • Update redhat etcd-debugsource to version 0:3.3.23-22.el8ost.
  • Update redhat openstack-keystone to version 1:16.0.3-2.20260616134936.9d699a7.el8ost.
  • Update redhat python3-keystone to version 1:16.0.3-2.20260616134936.9d699a7.el8ost.
  • Update redhat python-pyasn1 to version 0:0.4.6-4.el8ost.
  • Update redhat python3-pyasn1 to version 0:0.4.6-4.el8ost.
  • Update redhat python3-pyasn1-modules to version 0:0.4.6-4.el8ost.
  • Update redhat openstack-nova to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-api to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-common to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-compute to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-conductor to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-console to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-migration to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-novncproxy to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-scheduler to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-serialproxy to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-nova-spicehtml5proxy to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat python3-nova to version 1:20.6.2-2.20260317135026.8a24acd.el8ost.
  • Update redhat openstack-glance to version 1:19.0.5-2.20260512165254.eb6ad61.el8ost.
  • Update redhat python3-glance to version 1:19.0.5-2.20260512165254.eb6ad61.el8ost.
  • Update redhat erlang to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-asn1 to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-asn1-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-compiler to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-crypto to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-crypto-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-debugsource to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-eldap to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-erl_interface-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-erts to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-erts-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-hipe to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-inets to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-kernel to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-mnesia to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-odbc-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-os_mon to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-os_mon-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-parsetools to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-public_key to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-runtime_tools to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-runtime_tools-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-sasl to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-snmp to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-ssl to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-stdlib to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-syntax_tools to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-tools to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-tools-debuginfo to version 0:23.3.4.18-2.el8ost.
  • Update redhat erlang-xmerl to version 0:23.3.4.18-2.el8ost.
  • Update redhat python-oslo-messaging to version 0:10.2.4-2.20260710155333.82281a0.el8ost.
  • Update redhat python3-oslo-messaging to version 0:10.2.4-2.20260710155333.82281a0.el8ost.
Affected software
Ecosystem VendorProductAffected versions
Red Hat:openstack:16.2::el8 redhat collectd-sensubility < 0:0.2.1-1.1.el8ost
Fix: upgrade to 0:0.2.1-1.1.el8ost
Red Hat:openstack:16.2::el8 redhat collectd-sensubility-debuginfo < 0:0.2.1-1.1.el8ost
Fix: upgrade to 0:0.2.1-1.1.el8ost
Red Hat:openstack:16.2::el8 redhat etcd < 0:3.3.23-22.el8ost
Fix: upgrade to 0:3.3.23-22.el8ost
Red Hat:openstack:16.2::el8 redhat etcd-debuginfo < 0:3.3.23-22.el8ost
Fix: upgrade to 0:3.3.23-22.el8ost
Red Hat:openstack:16.2::el8 redhat etcd-debugsource < 0:3.3.23-22.el8ost
Fix: upgrade to 0:3.3.23-22.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-keystone < 1:16.0.3-2.20260616134936.9d699a7.el8ost
Fix: upgrade to 1:16.0.3-2.20260616134936.9d699a7.el8ost
Red Hat:openstack:16.2::el8 redhat python3-keystone < 1:16.0.3-2.20260616134936.9d699a7.el8ost
Fix: upgrade to 1:16.0.3-2.20260616134936.9d699a7.el8ost
Red Hat:openstack:16.2::el8 redhat python-pyasn1 < 0:0.4.6-4.el8ost
Fix: upgrade to 0:0.4.6-4.el8ost
Red Hat:openstack:16.2::el8 redhat python3-pyasn1 < 0:0.4.6-4.el8ost
Fix: upgrade to 0:0.4.6-4.el8ost
Red Hat:openstack:16.2::el8 redhat python3-pyasn1-modules < 0:0.4.6-4.el8ost
Fix: upgrade to 0:0.4.6-4.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-api < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-common < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-compute < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-conductor < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-console < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-migration < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-novncproxy < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-scheduler < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-serialproxy < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-nova-spicehtml5proxy < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat python3-nova < 1:20.6.2-2.20260317135026.8a24acd.el8ost
Fix: upgrade to 1:20.6.2-2.20260317135026.8a24acd.el8ost
Red Hat:openstack:16.2::el8 redhat openstack-glance < 1:19.0.5-2.20260512165254.eb6ad61.el8ost
Fix: upgrade to 1:19.0.5-2.20260512165254.eb6ad61.el8ost
Red Hat:openstack:16.2::el8 redhat python3-glance < 1:19.0.5-2.20260512165254.eb6ad61.el8ost
Fix: upgrade to 1:19.0.5-2.20260512165254.eb6ad61.el8ost
Red Hat:openstack:16.2::el8 redhat erlang < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-asn1 < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-asn1-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-compiler < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-crypto < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-crypto-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-debugsource < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-eldap < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-erl_interface-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-erts < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-erts-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-hipe < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-inets < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-kernel < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-mnesia < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-odbc-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-os_mon < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-os_mon-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-parsetools < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-public_key < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-runtime_tools < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-runtime_tools-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-sasl < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-snmp < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-ssl < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Showing 50 of 57. Show the rest
Ecosystem VendorProductAffected versions
Red Hat:openstack:16.2::el8 redhat erlang-stdlib < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-syntax_tools < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-tools < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-tools-debuginfo < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat erlang-xmerl < 0:23.3.4.18-2.el8ost
Fix: upgrade to 0:23.3.4.18-2.el8ost
Red Hat:openstack:16.2::el8 redhat python-oslo-messaging < 0:10.2.4-2.20260710155333.82281a0.el8ost
Fix: upgrade to 0:10.2.4-2.20260710155333.82281a0.el8ost
Red Hat:openstack:16.2::el8 redhat python3-oslo-messaging < 0:10.2.4-2.20260710155333.82281a0.el8ost
Fix: upgrade to 0:10.2.4-2.20260710155333.82281a0.el8ost
Original advisory text
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
References
Severity
9.1 Critical
CVSS 3.1: 9.1 (OSV)
Timeline
Published14 Aug 2026
Updated15 Aug 2026
First seen15 Aug 2026
Sources
Monitor software like this
Free during beta