EUVD-2026-87084
GHSA-p93m-62q2-q66v
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to OpenStack Glance
-
DeliverySet crafted image location URI to attacker host
-
ExploitVMware driver _retry_request follows without host validation
-
ExecutionvCenter auth headers sent to attacker server
-
ImpactReuse stolen credentials against VMware datastore
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The deployment must use OpenStack Glance configured with the VMware/vCenter datastore driver (glance_store VMware backend) so that vCenter authentication headers are configured. The attacker must be an authenticated OpenStack user with the ability to set or override an image location URI (a privilege often gated by policy, e.g. show_multiple_locations/set_location). Exploitation further requires the attacker to control an external HTTP endpoint that the driver's _retry_request will contact. Limiting factors: authentication is required (PR:L), the VMware backend is a non-default/niche configuration, and SSVC marks the flaw not automatable, so exploitation is targeted rather than mass-scalable. |
| Impact | The CVSS 3.1 base score of 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) rates this High, and the SSVC framework reinforces meaningful concern: Exploitation=poc (proof-of-concept public, consistent with the referenced GitHub repo sadandbset/CVE-2026-51772-CVE-2026-51773), Technical Impact=total, but Automatable=no - meaning it is not a spray-and-pray mass-exploitation candidate, it requires a valid authenticated OpenStack account and a VMware-backed glance_store. No EPSS score was provided in the input and CISA KEV status is NO, so there is no evidence of widespread or active exploitation; the signal set indicates a credible, targeted credential-disclosure SSRF rather than an internet-wide emergency. Key caveat: the CVSS lists I:H, but the described mechanism is fundamentally a confidentiality leak (vCenter auth headers sent to an attacker server) - integrity impact is only realizable downstream after the stolen credentials are reused, so I:H is arguably overstated. Affected-version data is 'n/a' in both EUVD and CPE (cpe:2.3:a:n/a:n/a:*), so the exact fixed release is not verifiable from the provided data - verify against an OpenStack/glance_store advisory. |
| Exploit ScenarioDerived | An authenticated OpenStack tenant user (with rights to set an image location) creates or updates a Glance image whose location URI points to an attacker-controlled HTTP server. When the VMware datastore driver's _retry_request follows that URI, it attaches the configured vCenter authentication headers without validating the destination host, delivering those credentials straight to the attacker. A public proof-of-concept/write-up is referenced on GitHub, though it is not confirmed active exploitation. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 25, 2026
A server-side request forgery in the VMware datastore driver of OpenStack glance_store lets an authenticated OpenStack user supply a crafted image location URI pointing at an attacker-controlled server, causing the driver's _retry_request function to attach sensitive vCenter authentication headers to that outbound request and disclose them. The deployment must be configured with the non-default VMware/vCenter datastore backend, and the attacker needs an account with the ability to set or override image locations (typically gated behind the set_location / show_multiple_locations policy); SSVC rates the issue as Exploitation=poc with publicly available exploit code on GitHub (sadandbset/CVE-2026-51772-CVE-2026-51773), Technical Impact=total, but Automatable=no, so it is a targeted attack rather than a mass-exploitation candidate and there is no confirmed active exploitation (CISA KEV) at time of analysis. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N, base 8.1) reflects high confidentiality impact from credential theft; our independent assessment adjusts the integrity impact to Low because the primary outcome is leakage of authentication material rather than direct modification of data.
RemediationAI
No vendor-released patch or fixed version is identified in the supplied intelligence, so operators must rely on compensating controls pending an upstream advisory or commit. The most effective mitigation is to restrict the policy gates that permit user-controlled image locations: in Glance's policy.yaml, keep set_location and show_multiple_locations restricted to trusted administrative roles only, which removes the untrusted URI input the VMware driver's _retry_request follows (trade-off: legitimate multi-location import workflows used by operators will require an admin to perform them, and any automation relying on self-service locations must be redesigned). Additionally, apply outbound egress filtering on glance-api nodes so HTTP/HTTPS traffic can only reach known vCenter and object-storage endpoints, with an explicit deny for arbitrary internet destinations (trade-off: broad egress blocks can break multi-cloud or external object-store backends and require an accurate allowlist). Where the VMware datastore backend is not strictly required, disable it or remove stored vCenter credentials from the Glance configuration to eliminate the sensitive headers entirely (trade-off: loss of the VMware datastore integration). If the backend must remain, deploy a version-tracked vendor fix as soon as one is published and monitor the OpenStack security advisory channel and the referenced NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-51773) for a patched release; note that public exploit code exists, so prioritize inventory of VMware-backed Glance deployments and audit Glance logs for location URIs pointing at unexpected external hosts.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is a classic CWE-918 server-side request forgery in OpenStack's image storage abstraction library, glance_store, which Glance uses to read and write image data across backends such as file, Swift, Ceph, S3 and VMware/vCenter datastores. In the VMware datastore driver, HTTP requests to vCenter are authenticated with embedded credentials or session headers, and the _retry_request helper is responsible for replaying failed requests; because it does not validate the destination host against an allowlist before re-attaching those sensitive authentication headers, an attacker who can influence the image location URI can redirect the retry to an arbitrary external endpoint and capture the vCenter credentials in transit. The attack surface is therefore the image-location handling path reachable by an authenticated user, combined with the presence of configured vCenter authentication material in the driver configuration. Notably, no CPE data was resolved for this CVE (cpe:2.3:a/n/a:n/a), and the EUVD affected-version list is also 'n/a', so precise version enumeration is unavailable from the supplied intelligence; remediation must be driven by the vendor advisory rather than CPE-derived version ranges.
Know when Openstack gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Authenticated user must be able to set an image location (PR:L); SSRF leaks vCenter credentials over the network (C:H); integrity impact is only indirect via reused stolen creds (I:L); no availability effect.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.
Executive ViewAI
OpenStack deployments that enable the non-default VMware/vCenter datastore backend in glance_store are exposed to a credential-disclosure flaw that can leak vCenter authentication headers to a server controlled by an attacker. Because those headers carry privileged access to the virtualized estate, a successful exploit could give an attacker the keys to the organization's VMware infrastructure rather than just a single image service. Leadership should care because any authenticated user holding image-location rights - often a routine operational role - can trigger the leak in an affected environment, and a public proof-of-concept is already circulating, though there is no confirmed actively exploited (CISA KEV) activity at time of analysis.
Disable the VMware/vCenter datastore backend where it is not required; restrict the set_location and show_multiple_locations policies to a minimal, named set of administrators; enforce outbound egress filtering so glance_store hosts can reach only approved vCenter and datastore endpoints; rotate and least-privilege the vCenter service-account credentials used by the image service; enable audit logging on image-location changes. No vendor-released patch identified at time of analysis.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users w
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10,
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an int
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remot
Code injection in OpenStack Vitrage query parser allows authenticated users to execute arbitrary Python code through cra
Exploit-DB