CVE-2026-55748: openstack horizon OS Command Injection
CVSS: 6.8v3.1MediumAnalyzed
AliasesGHSA-6wrm-x65g-hr4pPYSEC-2026-2519UBUNTU-CVE-2026-55748DEBIAN-CVE-2026-55748CGA-3vxj-g6gj-vww8CGA-5j65-gqhx-cgc7CGA-79f4-m4rf-gw99CGA-7rqp-w858-9r79CGA-8594-f9qv-9gh5CGA-8h5v-fc98-wvhrCGA-h5xm-4j39-cjg8CGA-mjr6-m65q-vx42
Published 17-06-2026Last modified 17-06-2026
Vulnerability summary
CVE-2026-55748 is a medium (CVSS 6.8) OS Command Injection vulnerability in openstack horizon. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.4% of scored vulnerabilities.
CVSS score
6.8/10
010
Medium · v3.1 (NVD)EPSS score
0.46%
0%100%
Low · +0.24 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 17-06-2026PublishedVulnerability first disclosed.
- 17-06-2026Last modifiedVulnerability information updated.
Description
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
CVSS metrics
6 scores · 6 sources · 1 versionMedium 6.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:HSources6 sources · 6.0–6.8
- CVE.orgCNA6.0MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:LDiffers
- OSV · PypiEcosystem advisory · calculated6.0MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:LDiffers
- OSV · UbuntuEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated6.0MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:LDiffers
EPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
+0.24 pp
From 0.22% on 19-09-2026
19-09-202619-10-2026
EPSS score0.46%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard4 products
- openstack-horizon-2025.1All versions (No fix recorded)
- openstack-horizon-2025.1-fipsAll versions (No fix recorded)
- openstack-horizon-2025.2All versions (No fix recorded)
- openstack-horizon-2025.2-fipsAll versions (No fix recorded)
Debian1 product
- horizon< 3:23.0.0-5+deb12u2 | < 3:25.3.0-3+deb13u1 | < 3:25.7.3-2
Openstack1 product
- horizon≥ 8.0.0, < 25.3.3 | ≥ 25.4.0, < 25.5.3 | ≥ 25.6.0, < 25.7.4
PyPI1 product
- horizon≤ 25.7.3
Ubuntu1 product
- horizonAll versions (No fix recorded)
5 vendors · 8 products
References
9 links
- github.com/openstack/horizonPACKAGE
- pypi.org/project/horizonPACKAGE
