THREAT OPS › Threat News › [NVD] CVE-2026-55748 (MEDIUM 6.0) — OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
[NVD] CVE-2026-55748 (MEDIUM 6.0) — OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
CVE-2026-55748 CVSS: 6.0 MEDIUM Published: 2026-06-17T15:17:02.503
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
Indicators of compromise
- CVE-2026-55748cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-55748