CYBERSECURITYTRACKER
Permanent story citation

Re: [OSSA-2026-043] OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-107363) errata 1

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9692

As cited

Copy frozen at (site build).

vulnerabilities

Re: [OSSA-2026-043] OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-107363) errata 1

OpenStack released an errata for OSSA-2026-043, assigning CVE-2026-107363 to a Zaqar WebSocket vulnerability that permits cross-project queue access through project substitution. The flaw affects Zaqar versions 1.0.0 through 20.1.3 and requires patching.

Why it matters: OpenStack operators running vulnerable Zaqar versions must patch immediately to prevent unauthorized access to queues across project boundaries, which could lead to data exposure or service disruption.

CVEsCVE-2026-107363
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary