CVE-2026-66139

OpenStack Zaqar versions up to 22.0.0 are vulnerable to an authentication bypass due to improper handling of the EXTRA-SPEC header when a UUID is known, potentially allowing unauthorized access to the messaging service. This vulnerability poses a medium risk as it could lead to unauthorized actions within the affected environment. Organizations utilizing OpenStack Zaqar should prioritize remediation to mitigate potential security breaches.