CVE-2026-77648

2.2 Faible

Publiée le 21/08/2026 à 01:16 · Modifiée le 18/10/2026 à 22:10 · En attente d'analyse NVD · Source : cve@mitre.org

Description

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.

Traduire en français

Produits concernés

OpenStack Glance

Scores CVSS

Version	Score	Source	Vecteur
3.1	2.2 Faible	cve@mitre.org	`CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-918

Références

https://wiki.openstack.org/wiki/OSSN/OSSN-0105
https://www.openwall.com/lists/oss-security/2026/08/11/7

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories