Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

CVE

CVE-2026-94572

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters.
Back to all
CVE

CVE-2026-94572

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters.

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled load balancer can embed a newline and inject arbitrary HAProxy configuration directives. Only deployments using the Amphora provider are affected.

Package Versions Affected

Package Version
patch Availability
No items found.

Automatically patch vulnerabilities without upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

CVSS Version

Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.4
-
4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
C
H
U
0
-
C
H
U
-

Related Resources

No items found.

References

https://opendev.org/openstack/octavia, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94572.json, https://nvd.nist.gov/vuln/detail/CVE-2026-94572, https://security.openstack.org/ossa/OSSA-2026-039.html, https://bugs.debian.org/1148175, https://bugs.launchpad.net/octavia/+bug/2162101, https://bugs.launchpad.net/octavia/+bug/2167565, https://opendev.org/openstack/octavia/commit/cad62902e4984a46ad80cbfa943e90006d8d599d, https://openwall.com/lists/oss-security/2026/09/21/6

Severity

0

CVSS Score
0
10

Basic Information

Base CVSS
0
EPSS Probability
0.00534%
EPSS Percentile
0.43938%
Introduced Version
6bad959e12075dd15f80f2b51259430955448db1,0
Fix Available
fa00c4a799a527db8c157db60862f4fc75bb404a,1:18.0.0-0ubuntu2.1,1:14.0.0-0ubuntu1.6,1:10.1.1-0ubuntu1.5

Fix Critical Vulnerabilities Instantly

Secure your app without upgrading.
Fix Without Upgrading