CVE-2026-55748 — OpenStack / Horizon

CVE-2026-55748

OpenStack / Horizon PUBLISHED

Description (CNA)

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.

Affected (CNA)

Vendor / product	Versions
OpenStack / Horizon	affected 8.0.0 before 25.3.3; affected 25.4.0 before 25.5.3; affected 25.6.0 before 25.7.4

CWE

CWE-78

References

https://wiki.openstack.org/wiki/OSSN/OSSN-0097
https://launchpad.net/bugs/2152240

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.