In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new long-lived credentials or authorize new delegations that persist independently of, and outlive, the credential used to obtain them. The delegation restrictions that block these operations did not consistently apply to all delegated token types, allowing an OAuth1-scoped token, for example, to create application credentials or authorize OAuth1 request tokens despite those operations being restricted for other delegated token types. All Keystone deployments that permit delegated authentication through OAuth1 access tokens, application credentials, or trusts are affected.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8854-1 advisory.

    Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated     authentication tokens. An authenticated attacker could possibly use this issue to create credentials or     delegations

    that outlasted the delegated token. (CVE-2026-80182)

    It was discovered that OpenStack Keystone incorrectly handled role assignment queries under certain     circumstances. An authenticated attacker could possibly use this issue to obtain sensitive information.
    This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.
    (CVE-2026-80183)

    Tim Shephard discovered that OpenStack Keystone did not properly restrict reauthentication using delegated     tokens. An authenticated attacker could possibly use this issue to escape their intended project scope and     obtain unauthorized access. (CVE-2026-80184)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4767 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4767-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     September 02, 2026                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : keystone     Version        : 2:22.0.2-0+deb12u4     CVE ID         : CVE-2026-80182 CVE-2026-80183 CVE-2026-80184

    Multiple vulnerabilities were discovered in Keystone, the OpenStack     identity service, which may result in authorisation bypass or     information disclosure.

    For Debian 12 bookworm, these problems have been fixed in version     2:22.0.2-0+deb12u4.

    We recommend that you upgrade your keystone packages.

    For the detailed security status of keystone please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/keystone

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6480 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6480-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     September 01, 2026                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : keystone     CVE ID         : CVE-2026-80182 CVE-2026-80183 CVE-2026-80184

    Multiple vulnerabilities were discovered in Keystone, the OpenStack     identity service, which may result in authorisation bypass or     information disclosure.

    For the stable distribution (trixie), these problems have been fixed in     version 2:27.0.0-3+deb13u5.

    We recommend that you upgrade your keystone packages.

    For the detailed security status of keystone please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/keystone

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
358413	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8854-1)	Nessus	Ubuntu Local Security Checks	Local	high
342531	Debian dla-4767 : keystone - security update	Nessus	Debian Local Security Checks	Local	high
342262	Debian dsa-6480 : keystone - security update	Nessus	Debian Local Security Checks	Local	high

Detections

Analytics

CVE-2026-80182

high

Tenable Plugins

high

high

high