CVE-2026-44394 | OpenStack Keystone up to 27.0.1/28.0.1/29.0.1 Authentication Plugin /v3/auth/tokens handle_scoped_token expires_at authorization

A vulnerability categorized as problematic has been discovered in OpenStack Keystone up to 27.0.1/28.0.1/29.0.1. This vulnerability affects the function handle_scoped_token of the file /v3/auth/tokens of the component Authentication Plugin Handler. The manipulation of the argument expires_at results in incorrect authorization.

This vulnerability is cataloged as CVE-2026-44394. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.