CVE-2026-34881 in OpenStack Glance

Сводка (Английский)

OpenStack Glance =30.0.0 <30.1.1, ==31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.

Ответственный

MITRE

Резервировать

31.03.2026

Раскрытие

31.03.2026

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
354322	OpenStack Glance ovf_process Image Import Plugin эскалация привилегий	918	Не определено	Официальное исправление	CVE-2026-34881