Log in Start free

Vulnerability · Published Feb 18, 2026 · Assigned by mitre

CVE-2026-24708

High 8.2

In plain English

A high-severity security flaw in Nova from OpenStack. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.4%top 63.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12nova2:26.2.2-1~deb12u4DEBIAN-CVE-2026-24708
Debian:12nova2:26.2.2-1~deb12u4DSA-6145-1
Debian:13nova2:31.0.0-6+deb13u2DSA-6145-1
Debian:13nova2:31.0.0-6+deb13u2DEBIAN-CVE-2026-24708
Debian:14nova2:32.1.0-7DEBIAN-CVE-2026-24708
PyPInovano fix listedPYSEC-2026-2685
PyPInovano fix listedGHSA-m4f3-qp2w-gwh6
PyPInovano fix listedGHSA-m4f3-qp2w-gwh6
PyPInovano fix listedGHSA-m4f3-qp2w-gwh6
Ubuntu:22.04:LTSnova3:25.2.1-0ubuntu2.10UBUNTU-CVE-2026-24708
Ubuntu:24.04:LTSnova3:29.2.0-0ubuntu1.3UBUNTU-CVE-2026-24708
Ubuntu:25.10nova3:32.0.0-0ubuntu1.1UBUNTU-CVE-2026-24708

Affected products (as reported)

VendorProductVersions
OpenStack Nova 0 – before 30.2.231.0.0 – before 31.2.132.0.0 – before 32.1.1

Weakness: CWE-669, CWE-73 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

References