CVE-2026-50266
2 advisories.
PyPI/neutron CVE-2026-50266: low 2.2, EPSS 0.38%
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
Action: Upgrade neutron to 28.0.1 or later.
pip install neutron==28.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 28.0.1 | - |
Fixed versions
| 28.0.1 |
Sources
- osv: GHSA-qmc5-gv6v-8p22
- https://nvd.nist.gov/vuln/detail/CVE-2026-50266
- https://bugs.launchpad.net/neutron/+bug/2152115
- https://github.com/openstack/neutron
- https://launchpad.net/bugs/2152115
- https://review.opendev.org/990273
- https://review.opendev.org/990353
- https://review.opendev.org/990356
- https://www.openwall.com/lists/oss-security/2026/06/04/6
CVE-2026-50266 · published · modified · JSON
PyPI/neutron CVE-2026-50266: low 2.2, EPSS 0.38%
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
Action: Upgrade neutron to 28.0.1 or later.
pip install neutron==28.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 28.0.1 | - |
Fixed versions
| 28.0.1 |
Sources
- osv: PYSEC-2026-3491
- https://nvd.nist.gov/vuln/detail/CVE-2026-50266
- https://bugs.launchpad.net/neutron/+bug/2152115
- https://github.com/openstack/neutron
- https://launchpad.net/bugs/2152115
- https://review.opendev.org/990273
- https://review.opendev.org/990353
- https://review.opendev.org/990356
- https://www.openwall.com/lists/oss-security/2026/06/04/6
- https://pypi.org/project/neutron
- https://github.com/advisories/GHSA-qmc5-gv6v-8p22
CVE-2026-50266 · published · modified · JSON