https://seclists.org/oss-sec/2026/q3/852: [OSSA-2026-039] OpenStack Octavia: HAProxy configuration injection leading to mote code execution in Octavia (CVE-2026-pending)
Published Sep 21, 2026
·Updated
Affected Software
1 affected component
Openstack Octavia (Amphora provider driver)>=0.8.0<=16.0.0, =17.0.0, =18.0.0
Frequently Asked Questions
1
Which Octavia releases are listed as affected?
Affected releases are Octavia versions from 0.8.0 up to, but not including, 16.1.0, as well as 17.0.0 and 18.0.0. The advisory specifically concerns deployments using the Amphora provider driver.