En resumen
- CVE-2026-50266 es una vulnerabilidad BAJO (CVSS 2.2) que afecta a neutron.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.26%, mayor que el 18.1% de las vulnerabilidades.
- Solución: actualizar a 28.0.1 o posterior.
| Package | Affected versions | Patched versions |
|---|
| neutron PyPI | < 28.0.1
| 28.0.1
|
Description
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).
NVD description
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free