GHSA-F2FF-P2WW-7P4P vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.2, openstack-glance-2025.2-fips, openstack-keystone-2026.1-fips, openstack-nova-2025.2, openstack-horizon-2025.2, openstack-horizon-2025.1-fips, openstack-horizon-2025.2-fips, openstack-glance-2025.1, airflow-core, openstack-horizon-2025.1,...

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...

PYSEC-2026-2685 OpenStack Nova calls qemu-img without format restrictions for resize

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in a...

PYSEC-2026-2490 OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...

GHSA-XJMJ-P278-4JP5 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3517 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2015-0259 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2015-3280 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-43HC-PWVX-PMFG vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2013-4179 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-92HC-C226-32Q7 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-5MJ6-643F-2G85 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-MFMJ-GWG3-VHW7 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-MFG3-P6M3-GJGR vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2026-46448 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3708 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-67RH-9P29-VRXR vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-X8XR-RM9R-7MVF vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3608 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

PYSEC-2026-1709 OpenStack Nova vulnerable to unauthorized access to potentially sensitive data

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced...