CVE-2024-28718 OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack

Critical 9.8 Published 12 Apr 2024 Updated 15 Aug 2024

A race condition in OpenStack Magnum allows remote attackers to execute arbitrary code via the cert_manager component.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2024-28718?

CVE-2024-28718 is a critical vulnerability in n/a, published on 12 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.

Weakness: CWE-367

Which versions are affected by CVE-2024-28718?

9 open source packages ship an affected version, including magnum. It affects 1 product.

Package	Affected	Fixed in
`magnum` PyPI	All versions	`14.1.2, 15.0.2, 16.0.2, 17.0.2`
`magnum` PyPI	All versions	`14.1.2`
`magnum` PyPI	All versions	`14.1.2`
`magnum` PyPI	From `15.0.0.0rc1`	`15.0.2`
`magnum` PyPI	From `15.0.0.0rc1`	`15.0.2`
`magnum` PyPI	From `16.0.0.0rc1`	`16.0.2`

3 more packages

`magnum` PyPI	From `16.0.0.0rc1`	`16.0.2`
`magnum` PyPI	From `17.0.0.0rc1`	`17.0.2`
`magnum` PyPI	From `17.0.0.0rc1`	`17.0.2`

Products include Openstack Magnum.

How do I fix CVE-2024-28718?

Upgrade magnum to a fixed version for your release line: 14.1.2, 15.0.2, 16.0.2 or 17.0.2.

Is CVE-2024-28718 being exploited?

There is no known exploitation of CVE-2024-28718 in the wild and no public exploit code.

CVE-2016-7404 Openstack Magnum Unsafe Credential Handling Critical 9.8

Sources

Also known as GHSA-jx7x-9r98-h5xr, PYSEC-2026-1602, UBUNTU-CVE-2024-28718.