HIGHUnknown

keystone: keystone: Delegated token scope restrictions not consistently enforced across trust, OAuth1, and application credential endpoints

keystone: keystone: Delegated token scope restrictions not consistently enforced across trust, OAuth1, and application credential endpoints

CVE-2026-2035364Published 1 week agoUpdated 1 week agoSource: Red Hat

Affected packages

No package-level mapping for this advisory.

Exploit signal

Known exploited (CISA KEV)
No
EPSS score
EPSS percentile

EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.

keystone: keystone: Delegated token scope restrictions not consistently enforced across trust, OAuth1, and application credential endpoints | HackTribune