High severity · published May 7, 2026
CVE-2026-40213
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints
7.4
CVSS
0.2%
EPSS
No
On KEV
Description
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope. An authenticated user with zero role assignments can complete various actions such as reprogramming FPGA bitstreams on arbitrary compute nodes via agent RPC.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CY
Cyborg · OpenStack
5.0.0 before 14.0.1; 15.0.0 before 15.0.1; 16.0.0 before 16.0.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-40213
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-40213
bugs.launchpad.net
https://bugs.launchpad.net/openstack-cyborg/+bug/2143263
security.openstack.org
https://security.openstack.org/ossa/OSSA-2026-011.html
www.openwall.com
https://www.openwall.com/lists/oss-security/2026/05/07/6
More from Cyborg
6.3
CVE-2026-40214
In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer