GHSA-m4f3-qp2w-gwh6
High · 8.2CVSS
8.2
EPSS
—
Published
Feb 18, 2026
CISA due date
—
The record
OpenStack Nova calls qemu-img without format restrictions for resize
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | nova | 0 | No fix |
| PyPI | nova | 31.0.0.0rc1 | No fix |
| PyPI | nova | 32.0.0.0rc1 | No fix |
Related vulnerabilities
- CVE-2026-24708 An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before… Same vulnerability
- CVE-2024-40767 In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a… Also affects nova
- CVE-2024-32498 An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and… Also affects nova
- CVE-2015-9543 An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x… Also affects nova
- CVE-2015-3241 OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the… Also affects nova
- CVE-2014-3608 The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated… Also affects nova
- CVE-2014-3517 api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before… Also affects nova
- CVE-2026-114722 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping… CWE-669