{
  "cveId": "CVE-2026-42998",
  "url": "https://patchblox.com/security/cve/CVE-2026-42998",
  "summary": "CVE-2026-42998 is fixed in 3 products on 1 platform, first by keystone 2:29.0.0-0ubuntu1.2, released May 28, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "keystone: An issue was discovered in OpenStack Keystone before 29.0.2",
  "description": "An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the owner of the application credential. An attacker can authenticate with their own application credential ID and secret while specifying a different user\u0027s name and domain in the request body. Keystone issues a token attributed to the victim user. The impersonated token is project-scoped and carries the intersection of the application credential\u0027s roles and the victim\u0027s actual roles on the project. This enables audit evasion, reading the victim\u0027s credentials, and acting as the victim within shared projects.",
  "published": "2026-05-28T12:16:00Z",
  "severity": "high",
  "cvss": 8.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00303,
  "epssPercentile": 0.23241,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "keystone",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2:22.0.2-0\u002Bdeb12u3",
      "fix": "DEBIAN-CVE-2026-42998",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-42998",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "keystone",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2:27.0.0-3\u002Bdeb13u4",
      "fix": "DEBIAN-CVE-2026-42998",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-42998",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "keystone",
      "release": "Debian 14",
      "fixedVersion": "2:29.0.1-2",
      "fix": "DEBIAN-CVE-2026-42998",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-42998",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "keystone",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2:21.0.1-0ubuntu2.4",
      "fix": "keystone 2:21.0.1-0ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-keystone-2-21.0.1-0ubuntu2.4",
      "released": "2026-06-24T14:07:38Z"
    },
    {
      "platform": "linux",
      "product": "keystone",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2:25.0.0-0ubuntu1.4",
      "fix": "keystone 2:25.0.0-0ubuntu1.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-keystone-2-25.0.0-0ubuntu1.4",
      "released": "2026-06-24T14:07:41Z"
    },
    {
      "platform": "linux",
      "product": "keystone",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2:28.0.0-0ubuntu1.3",
      "fix": "keystone 2:28.0.0-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-keystone-2-28.0.0-0ubuntu1.3",
      "released": "2026-06-24T14:07:44Z"
    },
    {
      "platform": "linux",
      "product": "keystone",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2:29.0.0-0ubuntu1.2",
      "fix": "keystone 2:29.0.0-0ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-keystone-2-29.0.0-0ubuntu1.2",
      "released": "2026-05-28T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "keystone-common",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2:21.0.1-0ubuntu2.4",
      "fix": "keystone-common 2:21.0.1-0ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-keystone-common-2-21.0.1-0ubuntu2.4",
      "released": "2026-06-24T14:07:38Z"
    },
    {
      "platform": "linux",
      "product": "keystone-common",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2:25.0.0-0ubuntu1.4",
      "fix": "keystone-common 2:25.0.0-0ubuntu1.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-keystone-common-2-25.0.0-0ubuntu1.4",
      "released": "2026-06-24T14:07:41Z"
    },
    {
      "platform": "linux",
      "product": "keystone-common",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2:28.0.0-0ubuntu1.3",
      "fix": "keystone-common 2:28.0.0-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-keystone-common-2-28.0.0-0ubuntu1.3",
      "released": "2026-06-24T14:07:44Z"
    },
    {
      "platform": "linux",
      "product": "keystone-common",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2:29.0.0-0ubuntu1.2",
      "fix": "keystone-common 2:29.0.0-0ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-keystone-common-2-29.0.0-0ubuntu1.2",
      "released": "2026-05-28T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-keystone",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2:21.0.1-0ubuntu2.4",
      "fix": "python3-keystone 2:21.0.1-0ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-keystone-2-21.0.1-0ubuntu2.4",
      "released": "2026-06-24T14:07:38Z"
    },
    {
      "platform": "linux",
      "product": "python3-keystone",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2:25.0.0-0ubuntu1.4",
      "fix": "python3-keystone 2:25.0.0-0ubuntu1.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-python3-keystone-2-25.0.0-0ubuntu1.4",
      "released": "2026-06-24T14:07:41Z"
    },
    {
      "platform": "linux",
      "product": "python3-keystone",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2:28.0.0-0ubuntu1.3",
      "fix": "python3-keystone 2:28.0.0-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-python3-keystone-2-28.0.0-0ubuntu1.3",
      "released": "2026-06-24T14:07:44Z"
    },
    {
      "platform": "linux",
      "product": "python3-keystone",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "2:29.0.0-0ubuntu1.2",
      "fix": "python3-keystone 2:29.0.0-0ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-python3-keystone-2-29.0.0-0ubuntu1.2",
      "released": "2026-05-28T12:16:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}