PYSEC-2026-2685 OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in a...

PYSEC-2026-2490 OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...

GHSA-43HC-PWVX-PMFG vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-92HC-C226-32Q7 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-XJMJ-P278-4JP5 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2015-0259 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2015-3280 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2013-4179 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3517 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-5MJ6-643F-2G85 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-MFMJ-GWG3-VHW7 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3708 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-MFG3-P6M3-GJGR vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2026-46448 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-67RH-9P29-VRXR vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-X8XR-RM9R-7MVF vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3608 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

PYSEC-2026-1709 OpenStack Nova vulnerable to unauthorized access to potentially sensitive data

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced...

PYSEC-2026-1708 OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to...

PYSEC-2026-882 OpenStack Nova Changing vnic_type breaks compute service restart

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...