CVE-2026-22797

EUVD-2026-3202

19.01.2026, 18:16

An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_token middleware fails to sanitize incoming authentication headers before processing OAuth 2.0 tokens. By sending forged identity headers such as X-Is-Admin-Project, X-Roles, or X-User-Id, an authenticated attacker may escalate privileges or impersonate other users. All deployments using the external_oauth2_token middleware are affected.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
mitre	CNA	9.9 CRITICAL	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat OpenShift Container Platform 4.17	1774266098 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.18	1773138063 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.19	1772477045 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.20	1772176749 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.21	1772029626 ≤ 𝑥 < *	ADP
openstack	keystonemiddleware	10.5.0 ≤ 𝑥 < 10.7.2	CNA
openstack	keystonemiddleware	10.8.0 ≤ 𝑥 < 10.9.1	CNA
openstack	keystonemiddleware	10.10.0 ≤ 𝑥 < 10.12.1	CNA