PT-2026-79323

CVE-2026-61397

Published

2026-08-21

Updated

2026-08-27

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.19.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0

Description Exposure of sensitive information to an unauthorized actor occurs within the OAuth2 authentication plugin and Google OAuth integration.

Recommendations Upgrade Apache CloudStack versions 4.19.0.0 through 4.20.3.0 to version 4.20.3.1. Upgrade Apache CloudStack versions 4.21.0.0 through 4.22.1.0 to version 4.22.1.1.

Exploitability

Exploit

Fix

Impacts

Researchers

Katriel Moses

Nutthawat Charoensiriphong

Panabordee Panitchakit

Paratpanu Pechsaman

Vendors

Affected products

Weakness enumeration