← Database

CVE-2026-74248

MEDIUM CVSS: 4.3 Published: 2026-08-14 Modified: 2026-08-17

Description

OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.

Affected Platforms

Unknown

Weakness Type

CWE-863

References