openstack-cyborg has 2 CVEs on record. The median CVSS is 6.8 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 6.8
Publish → KEV: —
Last 90 days: 0 prev 2

Products

openstack-cyborg 2

Follow openstack-cyborg:RSS feed Save a search →Embed badge ↗

2

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-40213High· 7.4OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints41
CVE-2026-40214Medium· 6.3OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer35

openstack-cyborg vulnerabilities

CVEs affecting openstack-cyborg, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-40214Medium· 6.3

OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer

OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer

▾ Sunlitopenstack-cyborg · openstack-cyborgEPSS 0.21%via OSV

CVE-2026-40213High· 7.4

OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints

OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints

▾ Twilightopenstack-cyborg · openstack-cyborgEPSS 0.21%via OSV

openstack-cyborg vulnerabilities (CVEs) · VulnSea