{
  "cveId": "CVE-2026-40214",
  "url": "https://patchblox.com/security/cve/CVE-2026-40214",
  "summary": "CVE-2026-40214 is fixed in 6 products on 1 platform, first by cyborg-agent 14.0.0-3\u002Bdeb13u1build0.25.10.1, released May 7, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "cyborg: In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer",
  "description": "In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL for every ARQ), database queries have no project filtering, and policy checks are self-referential (the authorize_wsgi decorator compares the caller\u0027s project_id with itself rather than the target resource). Any authenticated non-admin user can complete various actions such as deleting ARQs bound to other projects\u0027 instances, aka cross-tenant denial of service.",
  "published": "2026-05-07T15:16:00Z",
  "severity": "medium",
  "cvss": 6.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
  "epss": 0.00206,
  "epssPercentile": 0.10747,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cyborg",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "14.0.0-3\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-40214",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-40214",
      "released": "2026-05-27T17:38:13Z"
    },
    {
      "platform": "linux",
      "product": "cyborg",
      "release": "Debian 14",
      "fixedVersion": "16.0.0\u002Bgit\u002B2026.04.26.b8edfa06f1-1",
      "fix": "DEBIAN-CVE-2026-40214",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-40214",
      "released": "2026-05-27T17:38:13Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-agent",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "fix": "cyborg-agent 14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-cyborg-agent-14.0.0-3-deb13u1build0.25.10.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-agent",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "16.0.0-2ubuntu0.1",
      "fix": "cyborg-agent 16.0.0-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-cyborg-agent-16.0.0-2ubuntu0.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-api",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "fix": "cyborg-api 14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-cyborg-api-14.0.0-3-deb13u1build0.25.10.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-api",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "16.0.0-2ubuntu0.1",
      "fix": "cyborg-api 16.0.0-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-cyborg-api-16.0.0-2ubuntu0.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-common",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "fix": "cyborg-common 14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-cyborg-common-14.0.0-3-deb13u1build0.25.10.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-common",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "16.0.0-2ubuntu0.1",
      "fix": "cyborg-common 16.0.0-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-cyborg-common-16.0.0-2ubuntu0.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-conductor",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "fix": "cyborg-conductor 14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-cyborg-conductor-14.0.0-3-deb13u1build0.25.10.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "cyborg-conductor",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "16.0.0-2ubuntu0.1",
      "fix": "cyborg-conductor 16.0.0-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-cyborg-conductor-16.0.0-2ubuntu0.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-cyborg",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "fix": "python3-cyborg 14.0.0-3\u002Bdeb13u1build0.25.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-python3-cyborg-14.0.0-3-deb13u1build0.25.10.1",
      "released": "2026-05-07T15:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-cyborg",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "16.0.0-2ubuntu0.1",
      "fix": "python3-cyborg 16.0.0-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-python3-cyborg-16.0.0-2ubuntu0.1",
      "released": "2026-05-07T15:16:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}