Auth bypass in Openstack Neutron
CVE-2026-50266
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default p…
Vulnerability class: Broken Access Control
CVSS v3 metric
CVSS v3 base score 2.2 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Openstack Neutron — versions 25.0.0, 26.0.0, 27.0.0
Weakness classification (CWE)
References
- cve@mitre.org (issue-tracking)
- cve@mitre.org (patch)
- cve@mitre.org (patch)
- cve@mitre.org (patch)
- cve@mitre.org
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
Frequently asked questions
- What is CVE-2026-50266?
- CVE-2026-50266 is a low-severity vulnerability in Openstack Neutron, classified under Incorrect Authorization. CVSS score: 2.2/10. Published 2026-06-04.
- How severe is CVE-2026-50266?
- Low severity. CVSS v3 base score is 2.2 out of 10.