OpenStack Octavia - Multiple Severe Vulnerabilities
Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv4.0: 9.4, CVEs: CVE-2026-94571, CVE-2026-94572, Summary: Input-validation vulnerabilities in OpenStack Octavia allow an authenticated tenant who owns a load balancer to inject arbitrary directives into its generated HAProxy configuration. Successful exploitation can execute commands as root on the provider-managed amphora, disclose other tenants’ TLS private keys and certificates, expose the deployment heartbeat…
EPSS 0.01 CVSS 9.4 CVE-2026-94571 CVE-2026-94572 OpenStack FI