Log in Start free

Vulnerability · Published Mar 31, 2026 · Assigned by mitre

CVE-2026-34881

Medium 5.0

In plain English

A medium-severity server-side request forgery in Glance from OpenStack. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.0Medium
Exploit odds (30 days)0.3%top 79.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12glance2:25.1.0-2+deb12u2DEBIAN-CVE-2026-34881
Debian:13glance2:30.0.0-3+deb13u1DEBIAN-CVE-2026-34881
Debian:14glance2:31.0.0-3DEBIAN-CVE-2026-34881
PyPIglance29.2.0GHSA-mc26-q38v-83gv
PyPIglance29.2.0, 30.2.0, 31.1.0PYSEC-2026-2492
PyPIglance30.2.0GHSA-mc26-q38v-83gv
PyPIglance31.1.0GHSA-mc26-q38v-83gv

Affected products (as reported)

VendorProductVersions
OpenStack Glance 0 – before 29.1.130.0.0 – before 30.1.131.0.0

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

References