Vulnerability · Published Oct 12, 2026 · Assigned by redhat

CVE-2026-83535Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison

High 7.4

In plain English

A high-severity security flaw in Red Hat OpenStack Platform 18.0 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.3%top 79.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or misconfigures Transport Layer Security (TLS), the basic authentication mechanism is silently bypassed. This fail-open design allows an adjacent network attacker to access sensitive Open vSwitch (OVS) and Open Virtual Network (OVN) dataplane metrics without credentials. Consequently, an attacker can enumerate bridge names, port counters, OVN controller state, and host topology, leading to information disclosure.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat OpenStack Platform 18.0	see references

Weakness: CWE-208 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://access.redhat.com/security/cve/CVE-2026-83535 vdb-entry, x_refsource_REDHAT
RHBZ#2526402 issue-tracking, x_refsource_REDHAT