CVE-2026-80183 | OpenStack Keystone up to 27.0.2/28.0.2/29.0.2 Role Assignment list_role_assignments_for_tree scope.project.id information disclosure

A vulnerability labeled as problematic has been found in OpenStack Keystone up to 27.0.2/28.0.2/29.0.2. This impacts the function list_role_assignments_for_tree of the component Role Assignment. The manipulation of the argument scope.project.id results in information disclosure.

This vulnerability is reported as CVE-2026-80183. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More