high7.5
CVE-2025-65073
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
Impact
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | keystone | < 26.0.1 | 26.0.1 |
Affected products
| Product | Affected versions |
|---|---|
| OpenStack Keystone | before 26.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.