CYBERSECURITYTRACKER
Permanent story citation

[OSSA-2026-040] OpenStack Blazar: Multiple authorization vulnerabilities in the Blazar V2 lease API (CVE-2026-93852, CVE-2026-93854)

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 8065

As cited

Copy frozen at (site build).

vulnerabilities

[OSSA-2026-040] OpenStack Blazar: Multiple authorization vulnerabilities in the Blazar V2 lease API (CVE-2026-93852, CVE-2026-93854)

OpenStack Blazar versions 1.0.0 through 15.1.1, 16.0.0, and 17.0.0 contain multiple authorization flaws in the V2 lease application programming interface (API). The vulnerabilities, tracked as CVE-2026-93852 and CVE-2026-93854, allow improper access control in the lease management functionality.

Why it matters: Organizations running affected Blazar versions need to upgrade immediately, as these authorization bypasses could allow unauthorized users to manipulate or access lease resources in their OpenStack environments.

CVEsCVE-2026-93852CVE-2026-93854
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary