CVE-2026-55707: Openstack Neutron vulnerability
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scope behavior for victim routers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-55707?
CVE-2026-55707 has a risk score of 55, indicating a moderate level of severity.
How do I fix CVE-2026-55707?
To fix CVE-2026-55707, upgrade OpenStack Neutron to version 28.0.2 or later.
What systems are affected by CVE-2026-55707?
CVE-2026-55707 affects OpenStack Neutron versions prior to 28.0.2.
What is the impact of CVE-2026-55707?
CVE-2026-55707 allows an authenticated user to onboard and alter subnets from another project's shared network.
Who should be concerned about CVE-2026-55707?
Organizations using vulnerable versions of OpenStack Neutron should be concerned about CVE-2026-55707 due to the potential for unauthorized changes to network configurations.