CVE-2026-83535 Red Hat CVE debrief

Who should care

Operators of Red Hat OpenStack Platform 18.0, security teams responsible for configuring and monitoring openstack-network-exporter, and administrators of adjacent networks should assess exposure and prioritize verification.

Why it matters

The openstack-network-exporter flaw allows an adjacent network attacker to access sensitive Open vSwitch (OVS) and Open Virtual Network (OVN) dataplane metrics without credentials when TLS is omitted or misconfigured, leading to information disclosure.

• Information disclosure of OVS and OVN dataplane metrics
• Enumeration of bridge names, port counters, OVN controller state, and host topology

Technical summary

The openstack-network-exporter flaw allows an adjacent network attacker to access sensitive Open vSwitch (OVS) and Open Virtual Network (OVN) dataplane metrics without credentials when TLS is omitted or misconfigured, leading to information disclosure. This issue affects Red Hat OpenStack Platform 18.0, and operators should assess exposure and prioritize verification of adjacent network access controls and TLS configuration for openstack-network-exporter. The vulnerability is caused by plaintext password storage and non-constant-time comparison in the basic authentication mechanism.

Defensive priority

Operators of Red Hat OpenStack Platform 18.0 should assess exposure and prioritize verification of adjacent network access controls and TLS configuration for openstack-network-exporter.

Recommended defensive actions

• Verify TLS configuration for openstack-network-exporter
• Assess adjacent network access controls
• Review authentication settings for openstack-network-exporter
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE Program record and NVD vulnerability detail provide official information about the vulnerability. The source item from cve_program_cvelist_v5 offers additional context. Evidence limits are based on available information, and defenders should verify affected scope and severity with the vendor. The openstack-network-exporter flaw allows an adjacent network attacker to access sensitive Open vSwitch (OVS) and Open Virtual Network (OVN) dataplane metrics without credentials when TLS is omitted or misconfigured.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.