PT-2026-50448

CVE-2026-55748

Published

2026-06-17

Updated

2026-07-13

Description by

CVSS 3.1

6.8

Medium

MetricsAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenStack Horizon versions prior to 25.7.4

Description OpenStack Horizon produces scripts for OpenStack RC file downloading that may contain a crafted project name with shell metacharacters. Shell metacharacters are special characters interpreted by the command-line shell to perform specific actions, which could lead to unintended command execution if not properly handled.

Recommendations Update to version 25.7.4.

Exploitability

Fix

Impacts

Researchers

Tim Shephard

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers

CVE-2026-55748