CVE Explorer
CVE-2026-55748
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"Horizon","vendor":"OpenStack","versions":[{"lessThan":"25.3.3","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"25.5.3","status":"affected","version":"25.4.0","versionType":"semver"},{"lessThan":"25.7.4","status":"affected","version":"25.6.0","versionType":"semver"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:664f651309a25df76a5a6fe0aeb1b69173ebfe9a9ba50d3e7372942de784d9f5 · sha256:402cf8280162cd58… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:664f651309a25df76a5a6fe0aeb1b69173ebfe9a9ba50d3e7372942de784d9f5 · sha256:402cf8280162cd58… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:664f651309a25df76a5a6fe0aeb1b69173ebfe9a9ba50d3e7372942de784d9f5 · sha256:402cf8280162cd58… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"url":"https://launchpad.net/bugs/2152240"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:664f651309a25df76a5a6fe0aeb1b69173ebfe9a9ba50d3e7372942de784d9f5 · sha256:402cf8280162cd58… · /containers/cna/references/1
{"url":"https://wiki.openstack.org/wiki/OSSN/OSSN-0097"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:664f651309a25df76a5a6fe0aeb1b69173ebfe9a9ba50d3e7372942de784d9f5 · sha256:402cf8280162cd58… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.