Neutron vulnerabilities

2 known vulnerabilities in Neutron from OpenStack. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Neutron: Incorrect Authorization

  CVE-2026-55707Aug 5, 2026OpenStack

  In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and

• 7.5 High severity

  neutron: Improper Check for Unusual or Exceptional Conditions

  CVE-2024-53916Nov 25, 2024OpenStack

  In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network o