UNKNOWN OpenStack
CVE-2026-71196
OSSA-2026-038: Multiple SSRF vulnerabilities in Glance web-download and HTTP image APIs
Sergey Kanibor (Luntry), Sami Yessou (switch.ch), and Abhishek Kekane (Red Hat) reported three related SSRF vulnerabilities in OpenStack Glance. The web-download import method ships with insecure default filtering that permits authenticated users to fetch arbitrary internal URLs, including cloud metadata endpoints. The URI validator does not perform DNS resolution before applying host filters, enabling bypass via attacker-controlled domains and DNS rebinding attacks. The HTTP image location API
Affected Products
- Glance: >=16.0.0 <30.2.1, >=31.0.0 <31.1.1, >=32.0.0 <32.0.1
- CVE-2026-71196
- CVE-2026-71197
- CVE-2026-71198
References
- https://security.openstack.org/ossa/OSSA-2026-038.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-71196
- https://nvd.nist.gov/vuln/detail/CVE-2026-71197
This unknown severity vulnerability was published on 2026-09-03 via OpenStack. Affected: Glance: >=16.0.0 <30.2.1, >=31.0.0 <31.1.1, >=32.0.0 <32.0.1, CVE-2026-71196, CVE-2026-71197 and 1 more.
vulnfeed aggregates 17229 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.