CVE-2026-40213

HighCVSS 7.4

Published: 07/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

OpenStack Cyborg before version 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope.

Risk Assessment

The risk is that an authenticated user with zero role assignments can perform various actions, such as reprogramming FPGA bitstreams on arbitrary compute nodes, which may lead to serious security breaches.

Recommendation

It is recommended to upgrade OpenStack Cyborg to version 16.0.1 or later to mitigate this vulnerability. Additionally, consider implementing more restrictive authorization policies for the API.

Other vulnerabilities in OpenStack Cyborg

CVE-2026-40214Medium
In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL for every ARQ), database queries have no project filtering, and policy checks are self-referential (the authorize_wsgi decorator compares the caller's project_id with itself rather than the target resource).

Original NVD description (English source)

OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope. An authenticated user with zero role assignments can complete various actions such as reprogramming FPGA bitstreams on arbitrary compute nodes via agent RPC.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS