Vulnerability Report

CVE-2026-33551

Title: Privilege Escalation via Restricted App Credentials in OpenStack Keystone

Other

Proof Of Concept

No public PoC currently indexed for CVE-2026-33551.

CWE Category CWE-863

Published Date Apr 10, 2026

Modified Date Jun 05, 2026

Exploit Status Not Found

Score 3.5 CVSS v3.1

Exploit Probability (EPSS)

0.22%

Vulnerability Summary

CVE-2026-33551: An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.

Impacted Vendors

openstack 1

keystonejs 1

Reference Links

https://bugs.launchpad.net/keystone/+bug/2142138 https://security.openstack.org/ossa/OSSA-2026-005.html

CVSS v3.1

Source Entity [email protected]

Severity MEDIUM

5.3

Attack Vector

NETWORK

Complexity

HIGH

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N