USN-8008-1

Details

Grzegorz Grasza discovered that the Keystone Middleware incorrectly sanitized authentication headers before processing OAuth 2.0 tokens. An attacker could possibly use this issue to escalate privileges or impersonate other users.

Affected Packages

python-keystonemiddleware

Ubuntu 24.04 LTS

Fixed in:

10.6.0-0ubuntu1.1

python-keystonemiddleware

Ubuntu 25.10

Fixed in:

10.12.0-0ubuntu1.1

References

REPORT

https://ubuntu.com/security/CVE-2026-22797

ADVISORY

https://ubuntu.com/security/notices/USN-8008-1