UBUNTU-CVE-2026-80183

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-80183

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80183.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-80183

Upstream

CVE-2026-80183

Published

2026-08-27T01:18:00Z

Modified

2026-08-31T17:17:00Z

Severity

7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with include_subtree to the GET /v3/role_assignments endpoint. The domain's project record has domain_id=null, causing the policy domain_id check to pass for any caller. With include_names, the response discloses the names and home-domain IDs of every user, group, project, and role involved. The literal "default" domain ID works against any deployment created with keystone-manage bootstrap. An attacker can harvest domain IDs from the response and repeat the query to map role assignments across the entire cloud. This is caused by misuse of "None" in list_role_assignments_for_tree.

References

Affected packages

Ubuntu:16.04:LTS

keystone

Package

Name: keystone
Purl: pkg:deb/ubuntu/keystone?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2:8.*

2:8.0.0-0ubuntu1

2:9.*

2:9.0.0~b1-0ubuntu1

2:9.0.0~b2-0ubuntu1

2:9.0.0~b3-0ubuntu1

2:9.0.0~rc1-0ubuntu1

2:9.0.0-0ubuntu1

2:9.0.2-0ubuntu1

2:9.0.2-0ubuntu2

2:9.1.0-0ubuntu1

2:9.2.0-0ubuntu1

2:9.3.0-0ubuntu1

2:9.3.0-0ubuntu2

2:9.3.0-0ubuntu3

2:9.3.0-0ubuntu3.1

2:9.3.0-0ubuntu3.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "keystone",
            "binary_version": "2:9.3.0-0ubuntu3.2"
        },
        {
            "binary_name": "python-keystone",
            "binary_version": "2:9.3.0-0ubuntu3.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80183.json"

Ubuntu:18.04:LTS

keystone

Package

Name: keystone
Purl: pkg:deb/ubuntu/keystone?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2:12.*

2:12.0.0-0ubuntu1

2:13.*

2:13.0.0~b1-0ubuntu1

2:13.0.0~b2-0ubuntu1

2:13.0.0~b3-0ubuntu1

2:13.0.0~rc1-0ubuntu1

2:13.0.0~rc2-0ubuntu1

2:13.0.0-0ubuntu1

2:13.0.1-0ubuntu1

2:13.0.2-0ubuntu1

2:13.0.2-0ubuntu3

2:13.0.4-0ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "keystone",
            "binary_version": "2:13.0.4-0ubuntu1"
        },
        {
            "binary_name": "python-keystone",
            "binary_version": "2:13.0.4-0ubuntu1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80183.json"

Ubuntu:22.04:LTS

keystone

Package

Name: keystone
Purl: pkg:deb/ubuntu/keystone?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2:20.*

2:20.0.0-0ubuntu1

2:20.0.0+git2021120815.2ddf8f321-0ubuntu1

2:20.0.0+git2022011217.771c943ad-0ubuntu1

2:20.0.0+git2022030313.a3fc9e7c3-0ubuntu1

2:21.*

2:21.0.0-0ubuntu1

2:21.0.1-0ubuntu1

2:21.0.1-0ubuntu2

2:21.0.1-0ubuntu2.1

2:21.0.1-0ubuntu2.2

2:21.0.1-0ubuntu2.4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "keystone",
            "binary_version": "2:21.0.1-0ubuntu2.4"
        },
        {
            "binary_name": "keystone-common",
            "binary_version": "2:21.0.1-0ubuntu2.4"
        },
        {
            "binary_name": "python3-keystone",
            "binary_version": "2:21.0.1-0ubuntu2.4"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80183.json"

Ubuntu:24.04:LTS

keystone

Package

Name: keystone
Purl: pkg:deb/ubuntu/keystone?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2:24.*

2:24.0.0-0ubuntu1

2:24.0.0+git2024011916.adfa92b4-0ubuntu1

2:25.*

2:25.0.0~rc1-0ubuntu1

2:25.0.0-0ubuntu1

2:25.0.0-0ubuntu1.1

2:25.0.0-0ubuntu1.2

2:25.0.0-0ubuntu1.4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "keystone",
            "binary_version": "2:25.0.0-0ubuntu1.4"
        },
        {
            "binary_name": "keystone-common",
            "binary_version": "2:25.0.0-0ubuntu1.4"
        },
        {
            "binary_name": "python3-keystone",
            "binary_version": "2:25.0.0-0ubuntu1.4"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80183.json"

Ubuntu:26.04:LTS

keystone

Package

Name: keystone
Purl: pkg:deb/ubuntu/keystone?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2:28.*

2:28.0.0-0ubuntu1

2:28.0.0-0ubuntu2

2:28.0.0+git20260119.61.8a42793e7-0ubuntu1

2:29.*

2:29.0.0~rc1-0ubuntu1

2:29.0.0-0ubuntu1

2:29.0.0-0ubuntu1.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "keystone",
            "binary_version": "2:29.0.0-0ubuntu1.2"
        },
        {
            "binary_name": "keystone-common",
            "binary_version": "2:29.0.0-0ubuntu1.2"
        },
        {
            "binary_name": "python3-keystone",
            "binary_version": "2:29.0.0-0ubuntu1.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80183.json"

Ubuntu:Pro:20.04:LTS

keystone

Package

Name: keystone
Purl: pkg:deb/ubuntu/keystone?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2:16.*

2:16.0.0-0ubuntu1

2:17.*

2:17.0.0~b1~git2019121613.db81fee63-0ubuntu1

2:17.0.0~b2~git2020020513.99733f172-0ubuntu1

2:17.0.0~b3~git2020032415.9f9040257-0ubuntu1

2:17.0.0~b3~git2020032415.9f9040257-0ubuntu2

2:17.0.0~b3~git2020041013.7bb6314e4-0ubuntu1

2:17.0.0-0ubuntu0.20.04.1

2:17.0.1-0ubuntu1

2:17.0.1-0ubuntu2

2:17.0.1-0ubuntu2+esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "keystone",
            "binary_version": "2:17.0.1-0ubuntu2+esm1"
        },
        {
            "binary_name": "keystone-common",
            "binary_version": "2:17.0.1-0ubuntu2+esm1"
        },
        {
            "binary_name": "python3-keystone",
            "binary_version": "2:17.0.1-0ubuntu2+esm1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80183.json"