CVE-2026-24708
High · 8.2CVSS
8.2
EPSS
0.4%
Published
Feb 18, 2026
CISA due date
—
The record
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | nova | 0 | No fix |
| PyPI | nova | 31.0.0.0rc1 | No fix |
| PyPI | nova | 32.0.0.0rc1 | No fix |
Related vulnerabilities
- GHSA-m4f3-qp2w-gwh6 OpenStack Nova calls qemu-img without format restrictions for resize Same vulnerability
- CVE-2024-40767 In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a… Also affects nova
- CVE-2024-32498 An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and… Also affects nova
- CVE-2015-9543 An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x… Also affects nova
- CVE-2015-3241 OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the… Also affects nova
- CVE-2014-3608 The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated… Also affects nova
- CVE-2014-3517 api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before… Also affects nova
- CVE-2026-114722 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping… CWE-669