OpenStack Zaqar up to 20.1.1/21.0.1/22.0.1 WSGI Transport improper authentication

Summaryinfo

A vulnerability was found in OpenStack Zaqar up to 20.1.1/21.0.1/22.0.1 and classified as critical. Impacted is an unknown function of the component WSGI Transport. The manipulation results in improper authentication. This vulnerability is reported as CVE-2026-97404. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in OpenStack Zaqar up to 20.1.1/21.0.1/22.0.1. Affected is an unknown code of the component WSGI Transport. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in the ability to read, enumerate, create, and delete that project's queues, messages, claims, and subscriptions. By additionally claiming an administrative role, the attacker may also perform administrative operations, such as managing pools and flavors in admin_mode deployments. Only deployments using the WSGI transport with an authentication strategy configured are affected; the websocket transport is not affected.

The advisory is shared for download at launchpad.net. This vulnerability is traded as CVE-2026-97404 since 09/24/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available.

Upgrading to version 20.1.2, 21.0.2 or 22.0.2 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Cloud Software

Vendor

• OpenStack

Name

• Zaqar

Version

• 20.1.0
• 20.1.1
• 21.0.0
• 21.0.1
• 22.0.0
• 22.0.1

License

• free

Website

• Vendor: https://www.openstack.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion