CVE-2025-65073
High
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
Exploit probability
0.2%
Published
July 7, 2026
Required by
Not available
Last source change
July 7, 2026
02 / AFFECTED SOFTWARE
Affected packages
52 explicit affected versions
52 explicit affected versions
04 / EVIDENCE
Source records
Open Source Vulnerabilities
GHSA-hcqg-5g63-7j9h
View original source
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
Open Source Vulnerabilities
PYSEC-2026-1490
View original source
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
05 / REFERENCES