OpenStack Horizon RC file generation does not escape special characters in project names

When

2026-06-17 18:35 UTC

Where

Global (internet)

Category

cyber_advisory · pip

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.

Sources

• GitHub Advisory Database ↗ · first seen 2026-06-17 18:35 UTC

Defaxon links out to the original reporting and never republishes article text.

Correlated events

Computed by the Defaxon correlation engine — linked by shared actors, co-location, and temporal proximity. Scored hypotheses, never causal claims.

No correlated events found in the current window. As more events arrive, connections form automatically.

← Back to the live map