GitHub Advisoryadvisory · PyPI

GHSA-mm7j-mhhj-hj36 OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints

HIGH Published 2026-05-08 Modified 2026-05-13 Official page ↗
Aliases
CVE-2026-40213
Ecosystem
PyPI
Packages
openstack-cyborg
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-863
Reviewed
2026-05-13

Affected packages

• PyPI openstack-cyborg: < 16.0.1 → fixed in 16.0.1

Description

OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope. An authenticated user with zero role assignments can complete various actions such as reprogramming FPGA bitstreams on arbitrary compute nodes via agent RPC.

Related

Alias · CVE (1)

  • CVE-2026-40213 OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References