{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71198", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-08-05T05:52:48.170Z", "datePublished": "2026-09-14T06:54:21.860Z", "dateUpdated": "2026-09-14T14:41:21.586Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Glance", "repo": "https://opendev.org/openstack/glance", "vendor": "OpenStack", "versions": [{"lessThan": "30.2.1", "status": "affected", "version": "16.0.0", "versionType": "semver"}, {"lessThan": "31.1.1", "status": "affected", "version": "31.0.0", "versionType": "semver"}, {"lessThan": "32.0.1", "status": "affected", "version": "32.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the import_filtering_opts host restrictions. An authenticated user can add a location pointing to internal endpoints such as the cloud metadata service (169.254.169.254), and retrieve the response by downloading the image data. This affects both the new POST /v2/images/{id}/locations API and the old PATCH API when show_multiple_locations is enabled. Deployments with the HTTP store backend enabled are affected."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 7, "baseSeverity": "HIGH", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-09-14T06:54:21.860Z"}, "references": [{"tags": ["issue-tracking"], "url": "https://launchpad.net/bugs/2161330"}, {"tags": ["vendor-advisory"], "url": "https://security.openstack.org/ossa/OSSA-2026-038.html"}, {"tags": ["vendor-advisory", "mailing-list"], "url": "https://openwall.com/lists/oss-security/2026/09/03/2"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "versionStartIncluding": "16.0.0", "versionEndExcluding": "30.2.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "versionStartIncluding": "31.0.0", "versionEndExcluding": "31.1.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "versionStartIncluding": "32.0.0", "versionEndExcluding": "32.0.1"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-14T14:40:32.174645Z", "id": "CVE-2026-71198", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-14T14:41:21.586Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71198", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-08-05T05:52:48.170Z", "datePublished": "2026-09-14T06:54:21.860Z", "dateUpdated": "2026-09-14T14:41:21.586Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Glance", "repo": "https://opendev.org/openstack/glance", "vendor": "OpenStack", "versions": [{"lessThan": "30.2.1", "status": "affected", "version": "16.0.0", "versionType": "semver"}, {"lessThan": "31.1.1", "status": "affected", "version": "31.0.0", "versionType": "semver"}, {"lessThan": "32.0.1", "status": "affected", "version": "32.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the import_filtering_opts host restrictions. An authenticated user can add a location pointing to internal endpoints such as the cloud metadata service (169.254.169.254), and retrieve the response by downloading the image data. This affects both the new POST /v2/images/{id}/locations API and the old PATCH API when show_multiple_locations is enabled. Deployments with the HTTP store backend enabled are affected."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 7, "baseSeverity": "HIGH", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-09-14T06:54:21.860Z"}, "references": [{"tags": ["issue-tracking"], "url": "https://launchpad.net/bugs/2161330"}, {"tags": ["vendor-advisory"], "url": "https://security.openstack.org/ossa/OSSA-2026-038.html"}, {"tags": ["vendor-advisory", "mailing-list"], "url": "https://openwall.com/lists/oss-security/2026/09/03/2"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "versionStartIncluding": "16.0.0", "versionEndExcluding": "30.2.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "versionStartIncluding": "31.0.0", "versionEndExcluding": "31.1.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "versionStartIncluding": "32.0.0", "versionEndExcluding": "32.0.1"}]}]}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71198", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-14T14:40:32.174645Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-14T14:41:15.798Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Glance", "repo": "https://opendev.org/openstack/glance", "vendor": "OpenStack", "versions": [{"lessThan": "30.2.1", "status": "affected", "version": "16.0.0", "versionType": "semver"}, {"lessThan": "31.1.1", "status": "affected", "version": "31.0.0", "versionType": "semver"}, {"lessThan": "32.0.1", "status": "affected", "version": "32.0.0", "versionType": "semver"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the import_filtering_opts host restrictions. An authenticated user can add a location pointing to internal endpoints such as the cloud metadata service (169.254.169.254), and retrieve the response by downloading the image data. This affects both the new POST /v2/images/{id}/locations API and the old PATCH API when show_multiple_locations is enabled. Deployments with the HTTP store backend enabled are affected."}], "id": "CVE-2026-71198", "lastModified": "2026-09-14T15:17:06.843", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "[email protected]", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71198", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-14T14:40:32.174645Z", "version": "2.0.3"}}]}, "published": "2026-09-14T07:17:16.867", "references": [{"source": "[email protected]", "url": "https://launchpad.net/bugs/2161330"}, {"source": "[email protected]", "url": "https://openwall.com/lists/oss-security/2026/09/03/2"}, {"source": "[email protected]", "url": "https://security.openstack.org/ossa/OSSA-2026-038.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "[email protected]", "type": "Secondary"}]}

{"acknowledgement": "Upstream acknowledges Cyril Roelandt (Red Hat) as the original reporter.", "bugzilla": {"description": "openstack-glance: openstack-glance: SSRF via location API missing host validation", "id": "2524517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524517"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.7", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-918", "details": ["A server-side request forgery (SSRF) vulnerability was found in OpenStack Glance. When the HTTP store backend is enabled, an authenticated user can add an image location URL pointing to internal network services. Glance validates only the URL scheme and does not check the host or IP address, allowing the server to make requests to arbitrary internal endpoints. An attacker can read the response by downloading the image, resulting in a full-read SSRF that may expose sensitive data such as cloud metadata credentials."], "mitigation": {"lang": "en:us", "value": "The following measures reduce risk:\n1. If the HTTP store backend is not required, remove it from enabled_backends in glance-api.conf and restart Glance API.\n2. If HTTP store is required, restrict add_image_location to a service-only role (for example add_image_location: rule:service_api).\n3. Deploy egress firewall rules on Glance API nodes to block outbound HTTP to link-local and private ranges (169.254.0.0/16, 127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16)."}, "name": "CVE-2026-71198", "package_state": [{"cpe": "cpe:/a:redhat:openstack:13", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 13 (Queens)"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:17.1", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 17.1"}, {"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-09-04T08:44:49Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-71198\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71198\nhttps://bugs.launchpad.net/glance/+bug/2161330\nhttps://redhat.atlassian.net/browse/OSPRH-34480"], "statement": "This vulnerability is rated as Important because an authenticated project member can use the Glance location API as a full-read SSRF proxy to internal HTTP services, including cloud metadata credentials. The attack requires the HTTP store backend to be enabled. It is separate from the web-download SSRF fixed in CVE-2026-34881.\nRed Hat OpenStack Platform (RHOSP) and Red Hat OpenStack Services on OpenShift (RHOSO) deployments that ship Glance with HTTP store enabled are affected. Deployments without an HTTP store backend are not affected through the new POST /locations API. The older PATCH location API additionally requires show_multiple_locations=True, which is off by default.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "glance", "vendor": "openstack"}], "created": "2026-09-04T13:30:05.635178+00:00", "updated": "2026-09-14T21:00:09.708850+00:00", "vendors": ["openstack", "openstack$PRODUCT$glance"]}