OpenNebula vulnerabilities
We track 2 vulnerabilities in OpenNebula products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2025.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest OpenNebula vulnerabilities
- 8.1 High severity
OpenNebula: Concurrent Execution using Shared Resource with Improper Synchronization
OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) bel
- 9.8 Critical severity
Opennebula: Improper Neutralization of Special Elements used in a Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion.