CVE-2026-22797
Critical
Description
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_token middleware fails to sanitize incoming authentication headers before processing OAuth 2.0 tokens. By sending forged identity headers such as X-Is-Admin-Project, X-Roles, or X-User-Id, an authenticated attacker may escalate privileges or impersonate other users. All deployments using the external_oauth2_token middleware are affected.
SeverityCritical
CVSS9.9
Exploit probability—
ProductOpenstack Keystonemiddleware
PublishedJan 19, 2026
First seenJan 19, 2026
Weakness typeCWE-290CWE-290
How to fix
Update
- OpenStack keystonemiddleware10.7.2, 10.9.1, 10.12.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenStack keystonemiddleware | 10.5.0 ≤ v < 10.7.2, 10.8.0 ≤ v < 10.9.1, 10.10.0 ≤ v < 10.12.1 | 10.7.2, 10.9.1, 10.12.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.