CVE catalog
CVE-2026-55748
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening
- Severity
- Medium · CVSS 6
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.25% · Oct 25, 2026
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | horizon | sid | 3:27.0.0-4 | fixed |
| Debian | horizon | forky | 3:27.0.0-4 | fixed |
| Debian | horizon | trixie | 3:25.3.0-3+deb13u1 | fixed |
| Debian | horizon | bookworm | 3:23.0.0-5+deb12u2 | fixed |
| Cpe | horizon | Not reported | 25.7.4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | horizon | source | sid | 3:25.7.3-2 | not yet assigned | Not reported | [1138845] |
| Debian | horizon | source | forky | 3:25.7.3-2 | not yet assigned | Not reported | [1138845] |
| Debian | horizon | source | trixie | 3:25.3.0-3+deb13u1 | not yet assigned | Not reported | [1138845] |
| Debian | horizon | source | bookworm | 3:23.0.0-5+deb12u2 | not yet assigned | Not reported | [1138845] |
| Cpe | horizon | cpe | Not reported | 25.7.4 | Not reported | NVD-CVE-2026-55748 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [horizon-doc]Fixed
Source package: [horizon]
Details (2)
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
- [openstack-dashboard]Fixed
Source package: [horizon]
Details (2)
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
- [openstack-dashboard-apache]Fixed
Source package: [horizon]
Details (2)
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
- [python3-django-horizon]Fixed
Source package: [horizon]
Details (2)
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
3:23.0.0-5+deb12u2· all · bookwormFixed · Fixed:
3:23.0.0-5+deb12u2nvd · horizon · debian · bookworm; nvd · horizon · debian · 12
[Debian 13 (Trixie)]
- [horizon-doc]Fixed
Source package: [horizon]
Details (2)
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
- [openstack-dashboard]Fixed
Source package: [horizon]
Details (2)
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
- [openstack-dashboard-apache]Fixed
Source package: [horizon]
Details (2)
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
- [python3-django-horizon]Fixed
Source package: [horizon]
Details (2)
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
3:25.3.0-3+deb13u1· all · trixieFixed · Fixed:
3:25.3.0-3+deb13u1nvd · horizon · debian · 13
Observed:
References
- [https://launchpad.net/bugs/2152240]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-55748]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-55748]
- [https://security-tracker.debian.org/tracker/CVE-2026-55748]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55748.json]
- [https://wiki.openstack.org/wiki/OSSN/OSSN-0097]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]