The CloudStack PPMC was notified of a configuration vulnerability that exists in development versions of the Apache Incubated CloudStack project. This vulnerability allows a malicious user to execute arbitrary CloudStack API calls. A malicious user could, for example, delete all VMs in the system.
5c55e3186cdae62ed5be37387a29d8d58e87a494a33e0aad5812371b0f2a39b6