UNKNOWN OpenStack
CVE-2026-97149
OSSA-2026-041: Cross-container information disclosure via Swift tempurl
Oren Yomtov from ACT Security and “swdb”, a security researcher, independently reported a vulnerability in the Swift tempurl middleware. A party holding a single-object PUT TempURL signed with an account-level key ( X-Account-Meta-Temp-URL-Key ) could resend the signed request with an X-Copy-From header naming any object in the same account, causing Swift to copy the named object into the granted destination object, and read the copied bytes back with a second GET TempURL, disclosing objects the
Affected Products
- Swift: >=1.4.6 <2.35.5, >=2.36.0 <2.36.4, >=2.37.0 <2.37.4, >=2.38.0 <2.38.2
- CVE-2026-97149
References
- https://security.openstack.org/ossa/OSSA-2026-041.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-97149
This unknown severity vulnerability was published on 2026-09-24 via OpenStack. Affected: Swift: >=1.4.6 <2.35.5, >=2.36.0 <2.36.4, >=2.37.0 <2.37.4, >=2.38.0 <2.38.2, CVE-2026-97149.
vulnfeed aggregates 16937 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.