PYSEC-2026-1602

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/magnum/PYSEC-2026-1602.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2026-1602
Aliases
Published
2026-07-07T11:45:38.305224Z
Modified
2026-07-07T17:46:15.268495804Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack
Details

An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.

References

Affected packages

PyPI / magnum

Package

Name
magnum
View open source insights on deps.dev
Purl
pkg:pypi/magnum

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
14.1.2
Introduced
15.0.0.0rc1
Fixed
15.0.2
Introduced
16.0.0.0rc1
Fixed
16.0.2
Introduced
17.0.0.0rc1
Fixed
17.0.2

Affected versions

5.*
5.0.2
6.*
6.3.0
7.*
7.0.1
7.0.2
7.1.0
7.2.0
8.*
8.0.0.0rc1
8.0.0.0rc2
8.0.0
8.1.0
8.2.0
8.2.1
9.*
9.0.0.0rc1
9.0.0.0rc2
9.0.0
9.1.0
9.2.0
9.3.0
9.4.0
9.4.1
10.*
10.0.0.0rc1
10.0.0.0rc2
10.0.0
10.1.0
11.*
11.0.0.0rc1
11.0.0
11.1.0
11.1.1
11.2.0
11.2.1
12.*
12.0.0.0rc1
12.0.0.0rc2
12.0.0
12.1.0
12.1.1
13.*
13.0.0.0rc1
13.0.0
13.1.0
13.1.1
14.*
14.0.0.0rc1
14.0.0.0rc2
14.0.0
14.1.0
14.1.1
15.*
15.0.0.0rc1
15.0.0.0rc2
15.0.0
15.0.1
16.*
16.0.0.0rc1
16.0.0
16.0.1
17.*
17.0.0.0rc1
17.0.0
17.0.1

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/magnum/PYSEC-2026-1602.yaml"