What is the CVSS score of CVE-2026-24708?

CVE-2026-24708 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of OpenStack Nova are affected by CVE-2026-24708?

A high-severity vulnerability (CVSS 8.2) affects OpenStack Nova infrastructure components up to version 30.2.2, with no patch currently available.

How to fix or mitigate CVE-2026-24708?

Within 24 hours: Inventory all OpenStack Nova deployments and identify which systems run versions up to 30.2.2; establish incident response readiness. Within 7 days: Implement network segmentation to restrict Nova API access, disable non-essential Nova features if operationally feasible, and increase logging/monitoring of Nova components for suspicious activity. Within 30 days: Monitor vendor advisories for patch release; develop upgrade testing plan for Nova versions beyond 30.2.2; consider alternative cloud orchestration controls if patching timeline extends beyond acceptable risk window.

OpenStack Nova CVE-2026-24708

HIGH

Incorrect Resource Transfer Between Spheres (CWE-669)

2026-02-18 cve@mitre.org

GHSA-m4f3-qp2w-gwh6

Information Disclosure

8.2

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.2 HIGH

AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

Red Hat

7.1 HIGH

qualitative

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 18, 2026 - 18:24 nvd

HIGH 8.2

DescriptionCVE.org

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

AnalysisAI

OpenStack Nova compute nodes using the Flat image backend can have their host data destroyed when an authenticated user crafts a malicious QCOW header on a disk image and triggers a resize operation, causing qemu-img to execute without format restrictions. Affected versions include Nova before 30.2.2, 31.x before 31.2.1, and 32.x before 32.1.1, with no patch currently available. This vulnerability requires low privileges and user interaction but impacts the integrity and availability of the host system across trust boundaries.

Technical ContextAI

affects An issue was discovered in OpenStack Nova. was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.