EUVD-2026-17323Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The real-world risk is moderate despite the moderate CVSS score of 5.0. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) indicates network-accessible attack with low complexity, but mandatory authentication substantially reduces exposed population. The limited integrity impact and zero confidentiality/availability impact suggest this is not a critical escalation vector-attackers cannot extract secrets or crash services, only potentially manipulate image imports or cause denial-of-service to internal endpoints. However, the ability to reach internal services from an authenticated context may enable lateral movement or reconnaissance in multi-tenant environments. The vulnerability affects core import functionality, making it relevant to production deployments; however, the optional nature of the ovf_process plugin and the requirement for user authentication place this in the 'important but not critical' tier. Patch availability from the vendor is the strong mitigating factor. |
| Exploit ScenarioDerived | An authenticated Glance user with image import permissions crafts a malicious import request specifying an external URL controlled by the attacker (e.g., attacker.com/image.qcow2). The Glance web-download import handler fetches the URL; the attacker's server responds with an HTTP 301 redirect to http://127.0.0.1:5000/v2.0/tokens (the internal Keystone service). Glance's HTTP client follows the redirect transparently, bypassing the original URL validation check, and the request reaches the internal Keystone endpoint. While the CVSS vector indicates no confidentiality leak, this enables reconnaissance of internal services or potential cache poisoning of Glance's internal state. No public proof-of-concept exploit code has been identified; exploitation requires both authentication and knowledge of internal service endpoints. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 31, 2026
Server-Side Request Forgery in OpenStack Glance image import allows authenticated users to bypass URL validation via HTTP redirects and reach internal services. Affected versions include Glance prior to 29.1.1, 30.0.0 through 30.1.0, and 31.0.0. The vulnerability impacts web-download and glance-download import methods, plus the optional ovf_process plugin. An authenticated attacker can craft a redirect chain to access restricted internal endpoints, though the CVSS vector indicates no confidentiality impact and limited integrity risk (CVSS 5.0). No public exploit code or active exploitation has been confirmed at time of analysis.
RemediationAI
Upgrade OpenStack Glance to version 29.1.1 or later (for stable/29.x branch), version 30.1.1 or later (for stable/30.x branch), or version 31.1.0 or later (for stable/31.x branch). These releases include URL validation fixes that reject or validate redirect targets. If immediate upgrade is not feasible, disable the optional ovf_process import plugin if it is not required for operations, and restrict glance image import functionality to trusted administrator users only via role-based access control. Review and restrict network egress rules from Glance services to internal IP ranges and localhost to limit the scope of internal services reachable via redirects. Consult OpenStack security advisory OSSA-2026-004 and the Launchpad bug report for environment-specific mitigation and testing guidance before deployment.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in pypi
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in OpenStack Glance's image import functionality, which processes external image sources via HTTP. The root cause is improper validation of HTTP redirect targets (CWE-918: Server-Side Request Forgery). Glance's URL validation logic fails to account for HTTP 3xx redirects, allowing attackers to specify an external URL that redirects to internal services (localhost, private IP ranges, internal hostnames). The affected import methods (web-download, glance-download, and the optional ovf_process plugin) all use HTTP client libraries that follow redirects by default, inherently trusting the destination after the redirect. This bypasses any initial URL allowlist or validation checks performed on the user-supplied URL. The vulnerability requires prior authentication, limiting attack scope to users with glance image import privileges, which explains the PR:L (Privilege Required: Low) designation in the CVSS vector.
Know when Openstack gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
2DescriptionCVE.org
OpenStack Glance <29.1.1, >=30.0.0 <30.1.1, ==31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users w
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10,
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an int
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remot
Code injection in OpenStack Vitrage query parser allows authenticated users to execute arbitrary Python code through cra
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allVendor StatusVendor
Debian
Bug #1131274| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye | vulnerable | 2:21.0.0-2+deb11u1 | - |
| bullseye (security) | vulnerable | 2:21.1.0-1+deb11u2 | - |
| bookworm, bookworm (security) | vulnerable | 2:25.1.0-2+deb12u1 | - |
| trixie | vulnerable | 2:30.0.0-3 | - |
| forky, sid | fixed | 2:32.0.0~rc2-2 | - |
| (unstable) | fixed | 2:31.0.0-3 | - |
GitHub PoC
Exploit-DB