HIGH7.4
PYSEC-2026-2853
OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints
Quick fix
PYSEC-2026-2853 — openstack-cyborg: upgrade to the fixed version with the command below.
pip install --upgrade 'openstack-cyborg>=16.0.1'Details
OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope. An authenticated user with zero role assignments can complete various actions such as reprogramming FPGA bitstreams on arbitrary compute nodes via agent RPC.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/openstack-cyborg
Introduced in:
0Fixed in: 16.0.1Fix
pip install --upgrade 'openstack-cyborg>=16.0.1'References
- https://nvd.nist.gov/vuln/detail/CVE-2026-40213[ADVISORY]
- https://bugs.launchpad.net/openstack-cyborg/+bug/2143263[WEB]
- https://github.com/openstack/cyborg[PACKAGE]
- https://security.openstack.org/ossa/OSSA-2026-011.html[WEB]
- https://www.openwall.com/lists/oss-security/2026/05/07/6[WEB]
- https://pypi.org/project/openstack-cyborg[PACKAGE]
- https://github.com/advisories/GHSA-mm7j-mhhj-hj36[ADVISORY]