CVE-2026-55707: Neutron 14.0.0 to before 26.0.6, 27.0.0 to before 27.0.4, 28.0.0 to before 28.0.2

Affected technology

Neutron · 14.0.0 to before 26.0.6, 27.0.0 to before 27.0.4, 28.0.0 to before 28.0.2
OpenStack

Description’s affected range: before 28.0.2

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scope behavior for victim routers. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as none; integrity impact as high; availability impact as low.