-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| keystone | pip | < 8.0.0a0 | 8.0.0a0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from processing duplicate authentication methods in V3 API requests. The patch specifically modifies the get_method_names() function in controllers.py to deduplicate the methods list. The pre-patch code directly returned self.auth['identity']['methods'] without sanitization, enabling the authentication chaining attack. The added test in test_v3_auth.py explicitly verifies this fix by checking duplicate removal, confirming this was the entry point for the exploit.