CVE-2026-80184

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions prior to 29.0.3

Description Tokens obtained through delegated authentication mechanisms, such as OAuth1 access tokens, application credentials, or trusts, can be submitted to the token-method authentication path for reauthentication. This allows an attacker to escape the intended project scope. Specifically, when an application credential token is presented without an explicit scope, the system issues a new token scoped to the default project of the credential owner instead of the project for which the credential was originally issued, thereby bypassing project boundaries.

Recommendations Update OpenStack Keystone to version 29.0.3 or later.