openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...

openstack-nova: OpenStack Nova: Resource allocation issue due to unstripped hint data in server creation API

A flaw was found in OpenStack Nova. The server creation application programming interface API fails to remove specific hint data, leading to instances being created without proper Placement allocation. This can result in a denial of service, as resources may not be correctly assigned or managed f...

RHEL 7 : Red Hat OpenStack Platform 13.0 security advisory (Important) (RHSA-2026:94039)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94039 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

CVE-2026-102266 vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

CVE-2026-102269 vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

CVE-2026-101917 vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

GHSA-9V7F-9G4P-FFGJ vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

GHSA-FFC3-869F-JXW9 vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

CVE-2026-102267 vulnerabilities

Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security and bug fix advisory

Updated packages that resolve various issues are now available for Red Hat OpenStack Platform 17.1 Wallaby for Red Hat Enterprise Linux RHEL 9.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...

GHSA-F2FF-P2WW-7P4P vulnerabilities

Vulnerabilities for packages: mycli, openstack-horizon-2025.1, openstack-placement-2025.1-fips, openstack-horizon-2026.1, openstack-keystone-2025.1-fips, datahub-ingestion, authentik, dbt-bigquery, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, openstack-glance-2026.1, superset,...

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...

OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Affects- Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...

PYSEC-2026-2685 OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in a...

OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in a...

OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to...

OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...