CVE-2026-34881
OpenStack Glance is affected by Server-Side Request Forgery (SSRF)
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
5.0
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
CVE-2026-34881- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Weakness
- CWE-918, CWE-918
- Updated
- 2026-11-02
EUVDEUVD-2026-17323
7.1
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
EUVD-2026-17323- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mc26-q38v-83gv
5.0
OpenStack Glance is affected by Server-Side Request Forgery (SSRF)
OpenStack Glance versions < 29.1.1, >= 30.0.0 < 30.1.1, == 31.0.0 are affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only the glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
GHSA-mc26-q38v-83gv- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
NVD
5.0
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
CVE-2026-34881- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Weakness
- CWE-918
- Updated
- 2026-11-02
OSV
5.0
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
CVE-2026-34881- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-34881
5.0
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
DEBIAN-CVE-2026-34881- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-mc26-q38v-83gv
5.0
OpenStack Glance is affected by Server-Side Request Forgery (SSRF)
OpenStack Glance versions < 29.1.1, >= 30.0.0 < 30.1.1, == 31.0.0 are affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only the glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
GHSA-mc26-q38v-83gv- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSVPYSEC-2026-2492
5.0
OpenStack Glance is affected by Server-Side Request Forgery (SSRF)
OpenStack Glance versions < 29.1.1, >= 30.0.0 < 30.1.1, == 31.0.0 are affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only the glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
PYSEC-2026-2492- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2026:39812
7.1
Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-glance) security update
- Record
RHSA-2026:39812- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2026:54757
9.1
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
- Record
RHSA-2026:54757- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-34881
5.0
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
- Record
UBUNTU-CVE-2026-34881- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glancePyPI |
before 29.2.0 | 29.2.0 |
glancePyPI |
30.0.0 up to 30.2.0 | 30.2.0 |
glancePyPI |
31.0.0 to 31.0.0 | 31.1.0 |
glanceDebian:12 |
before 2:25.1.0-2+deb12u2, plus listed versions 2:25.1.0-22:25.1.0-2+deb12u1 |
2:25.1.0-2+deb12u2 |
glanceDebian:13 |
before 2:30.0.0-3+deb13u1, plus listed versions 2:30.0.0-3 |
2:30.0.0-3+deb13u1 |
glanceDebian:14 |
before 2:31.0.0-3, plus listed versions 2:30.0.0-32:31.0.0-12:31.0.0-22:31.0.0~rc1-12:31.0.0~rc1-2 |
2:31.0.0-3 |
glancePyPI |
before 29.2.0, plus listed versions 15.0.217.0.118.0.018.0.0.0b118.0.0.0rc1 Show 45 moreShow less18.0.119.0.019.0.0.0b119.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.0.420.0.020.0.0.0b120.0.0.0b220.0.0.0b320.0.0.0rc120.0.0.0rc220.0.120.1.020.2.021.0.021.0.0.0b121.0.0.0b221.0.0.0rc121.0.0.0rc221.1.022.0.022.0.0.0b222.0.0.0b322.0.0.0rc122.1.022.1.123.0.023.0.0.0b223.0.0.0b323.0.0.0rc123.0.0.0rc223.1.024.0.024.0.0.0rc124.1.024.2.024.2.125.0.025.0.0.0b225.0.0.0b325.0.0.0rc1 |
29.2.0 |
glancePyPI |
30.0.0 up to 30.2.0, plus listed versions 30.1.0 |
30.2.0 |
glancePyPI |
31.0.0 up to 31.1.0 | 31.1.0 |
glancePyPI |
before 29.2.0, 30.0.0 up to 30.2.0, 31.0.0 up to 31.1.0, plus listed versions 15.0.217.0.118.0.018.0.0.0b118.0.0.0rc1 Show 45 moreShow less18.0.119.0.019.0.0.0b119.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.0.420.0.020.0.0.0b120.0.0.0b220.0.0.0b320.0.0.0rc120.0.0.0rc220.0.120.1.020.2.021.0.021.0.0.0b121.0.0.0b221.0.0.0rc121.0.0.0rc221.1.022.0.022.0.0.0b222.0.0.0b322.0.0.0rc122.1.022.1.123.0.023.0.0.0b223.0.0.0b323.0.0.0rc123.0.0.0rc223.1.024.0.024.0.0.0rc124.1.024.2.024.2.125.0.025.0.0.0b225.0.0.0b325.0.0.0rc1 |
29.2.030.2.031.1.0 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-glanceRed Hat:openstack:18.0::el9 |
before 1:26.1.1-18.0.20260422134725.c2ac316.el9ost | 1:26.1.1-18.0.20260422134725.c2ac316.el9ost |
python3-glanceRed Hat:openstack:18.0::el9 |
before 1:26.1.1-18.0.20260422134725.c2ac316.el9ost | 1:26.1.1-18.0.20260422134725.c2ac316.el9ost |
collectd-sensubilityRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:0.2.1-1.1.el8ost | 0:0.2.1-1.1.el8ost |
collectd-sensubility-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:0.2.1-1.1.el8ost | 0:0.2.1-1.1.el8ost |
etcdRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:3.3.23-22.el8ost | 0:3.3.23-22.el8ost |
etcd-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:3.3.23-22.el8ost | 0:3.3.23-22.el8ost |
etcd-debugsourceRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:3.3.23-22.el8ost | 0:3.3.23-22.el8ost |
openstack-keystoneRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:16.0.3-2.20260616134936.9d699a7.el8ost | 1:16.0.3-2.20260616134936.9d699a7.el8ost |
python3-keystoneRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:16.0.3-2.20260616134936.9d699a7.el8ost | 1:16.0.3-2.20260616134936.9d699a7.el8ost |
python-pyasn1Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:0.4.6-4.el8ost | 0:0.4.6-4.el8ost |
python3-pyasn1Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:0.4.6-4.el8ost | 0:0.4.6-4.el8ost |
python3-pyasn1-modulesRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:0.4.6-4.el8ost | 0:0.4.6-4.el8ost |
openstack-novaRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-apiRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-commonRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-computeRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-conductorRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-consoleRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-migrationRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-novncproxyRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-schedulerRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-serialproxyRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-nova-spicehtml5proxyRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
python3-novaRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:20.6.2-2.20260317135026.8a24acd.el8ost | 1:20.6.2-2.20260317135026.8a24acd.el8ost |
openstack-glanceRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:19.0.5-2.20260512165254.eb6ad61.el8ost | 1:19.0.5-2.20260512165254.eb6ad61.el8ost |
python3-glanceRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 1:19.0.5-2.20260512165254.eb6ad61.el8ost | 1:19.0.5-2.20260512165254.eb6ad61.el8ost |
erlangRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-asn1Red Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-asn1-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-compilerRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-cryptoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-crypto-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-debugsourceRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-eldapRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-erl_interface-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-ertsRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-erts-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-hipeRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-inetsRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-kernelRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-mnesiaRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-odbc-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-os_monRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-os_mon-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-parsetoolsRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-public_keyRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-runtime_toolsRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-runtime_tools-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-saslRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-snmpRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-sslRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-stdlibRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-syntax_toolsRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-toolsRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-tools-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
erlang-xmerlRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:23.3.4.18-2.el8ost | 0:23.3.4.18-2.el8ost |
python-oslo-messagingRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:10.2.4-2.20260710155333.82281a0.el8ost | 0:10.2.4-2.20260710155333.82281a0.el8ost |
python3-oslo-messagingRed Hat:openstack:16.2::el8 From an advisory covering 24 CVEs |
before 0:10.2.4-2.20260710155333.82281a0.el8ost | 0:10.2.4-2.20260710155333.82281a0.el8ost |
glanceUbuntu:Pro:18.04:LTS |
before 2:16.0.1-0ubuntu1.1+esm2, plus listed versions 2:15.0.0-0ubuntu12:16.0.0~b2-0ubuntu22:16.0.0~rc1-0ubuntu12:16.0.0~rc2-0ubuntu12:16.0.0~rc3-0ubuntu12:16.0.0-0ubuntu12:16.0.1-0ubuntu1.1 |
2:16.0.1-0ubuntu1.1+esm2 |
glanceUbuntu:Pro:20.04:LTS |
before 2:20.2.0-0ubuntu1.2+esm2, plus listed versions 2:19.0.0-0ubuntu12:20.0.0~b1~git2019121610.0c6dd98d-0ubuntu12:20.0.0~b2~git2020020509.8649fdc2-0ubuntu12:20.0.0~b3~git2020032414.30ece7aa-0ubuntu22:20.0.0~b3~git2020041012.d5a0ce18-0ubuntu1 Show 6 moreShow less2:20.0.0-0ubuntu0.20.04.12:20.0.1-0ubuntu12:20.1.0-0ubuntu12:20.2.0-0ubuntu12:20.2.0-0ubuntu1.12:20.2.0-0ubuntu1.2 |
2:20.2.0-0ubuntu1.2+esm2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-34881 is a medium vulnerability (CVSS 5.0) in Openstack Glance, published March 31, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in glance 29.2.0.
References
bugs.launchpad.net/glance/+bug/2138602
security.openstack.org/ossa/OSSA-2026-004.html
access.redhat.com/security/cve/CVE-2026-34881
bugzilla.redhat.com/show_bug.cgi?id=2440368
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34881.json
access.redhat.com/errata/RHSA-2026:54757
Show 182 moreShow less
access.redhat.com/errata/RHSA-2026:39812
nvd.nist.gov/vuln/detail/CVE-2026-34881
github.com/advisories/GHSA-mc26-q38v-83gv
github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34881.json
security-tracker.debian.org/tracker/CVE-2026-34881
github.com/openstack/glance
pypi.org/project/glance
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2440353
bugzilla.redhat.com/show_bug.cgi?id=2440358
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39812.json
cve.org/CVERecord?id=CVE-2026-34881
bugzilla.redhat.com/show_bug.cgi?id=2415344
bugzilla.redhat.com/show_bug.cgi?id=2418462
bugzilla.redhat.com/show_bug.cgi?id=2430312
bugzilla.redhat.com/show_bug.cgi?id=2430472
bugzilla.redhat.com/show_bug.cgi?id=2434432
bugzilla.redhat.com/show_bug.cgi?id=2437111
bugzilla.redhat.com/show_bug.cgi?id=2445345
bugzilla.redhat.com/show_bug.cgi?id=2445356
bugzilla.redhat.com/show_bug.cgi?id=2449833
bugzilla.redhat.com/show_bug.cgi?id=2451037
bugzilla.redhat.com/show_bug.cgi?id=2451728
bugzilla.redhat.com/show_bug.cgi?id=2456333
bugzilla.redhat.com/show_bug.cgi?id=2456335
bugzilla.redhat.com/show_bug.cgi?id=2456336
bugzilla.redhat.com/show_bug.cgi?id=2456338
bugzilla.redhat.com/show_bug.cgi?id=2456339
bugzilla.redhat.com/show_bug.cgi?id=2464305
bugzilla.redhat.com/show_bug.cgi?id=2467822
bugzilla.redhat.com/show_bug.cgi?id=2480756
bugzilla.redhat.com/show_bug.cgi?id=2482093
bugzilla.redhat.com/show_bug.cgi?id=2482286
bugzilla.redhat.com/show_bug.cgi?id=2484207
bugzilla.redhat.com/show_bug.cgi?id=2484835
issues.redhat.com/browse/OSPRH-20808
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54757.json
access.redhat.com/security/cve/CVE-2025-61726
cve.org/CVERecord?id=CVE-2025-61726
nvd.nist.gov/vuln/detail/CVE-2025-61726
go.dev/cl/736712
go.dev/issue/77101
groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
pkg.go.dev/vuln/GO-2026-4341
access.redhat.com/security/cve/CVE-2025-61729
cve.org/CVERecord?id=CVE-2025-61729
nvd.nist.gov/vuln/detail/CVE-2025-61729
go.dev/cl/725920
go.dev/issue/76445
groups.google.com/g/golang-announce/c/8FJoBkPddm4
pkg.go.dev/vuln/GO-2025-4155
access.redhat.com/security/cve/CVE-2025-65073
cve.org/CVERecord?id=CVE-2025-65073
nvd.nist.gov/vuln/detail/CVE-2025-65073
security.openstack.org/ossa/OSSA-2025-002.html
openwall.com/lists/oss-security/2025/11/04/2
access.redhat.com/security/cve/CVE-2025-68121
cve.org/CVERecord?id=CVE-2025-68121
nvd.nist.gov/vuln/detail/CVE-2025-68121
go.dev/cl/737700
go.dev/issue/77217
groups.google.com/g/golang-announce/c/K09ubi9FQFk
pkg.go.dev/vuln/GO-2026-4337
access.redhat.com/security/cve/CVE-2026-23490
cve.org/CVERecord?id=CVE-2026-23490
nvd.nist.gov/vuln/detail/CVE-2026-23490
github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970
github.com/pyasn1/pyasn1/releases/tag/v0.6.2
github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq
access.redhat.com/security/cve/CVE-2026-24708
cve.org/CVERecord?id=CVE-2026-24708
nvd.nist.gov/vuln/detail/CVE-2026-24708
bugs.launchpad.net/nova/+bug/2137507
access.redhat.com/security/cve/CVE-2026-25679
cve.org/CVERecord?id=CVE-2026-25679
nvd.nist.gov/vuln/detail/CVE-2026-25679
go.dev/cl/752180
go.dev/issue/77578
groups.google.com/g/golang-announce/c/EdhZqrQ98hk
pkg.go.dev/vuln/GO-2026-4601
access.redhat.com/security/cve/CVE-2026-27137
cve.org/CVERecord?id=CVE-2026-27137
nvd.nist.gov/vuln/detail/CVE-2026-27137
go.dev/cl/752182
go.dev/issue/77952
pkg.go.dev/vuln/GO-2026-4599
access.redhat.com/security/cve/CVE-2026-27145
cve.org/CVERecord?id=CVE-2026-27145
nvd.nist.gov/vuln/detail/CVE-2026-27145
go.dev/cl/783621
go.dev/issue/79694
groups.google.com/g/golang-announce/c/tKs3rmcBcKw
pkg.go.dev/vuln/GO-2026-5037
access.redhat.com/security/cve/CVE-2026-32280
cve.org/CVERecord?id=CVE-2026-32280
nvd.nist.gov/vuln/detail/CVE-2026-32280
go.dev/cl/758320
go.dev/issue/78282
groups.google.com/g/golang-announce/c/0uYbvbPZRWU
pkg.go.dev/vuln/GO-2026-4947
access.redhat.com/security/cve/CVE-2026-32281
cve.org/CVERecord?id=CVE-2026-32281
nvd.nist.gov/vuln/detail/CVE-2026-32281
go.dev/cl/758061
go.dev/issue/78281
pkg.go.dev/vuln/GO-2026-4946
access.redhat.com/security/cve/CVE-2026-32282
cve.org/CVERecord?id=CVE-2026-32282
nvd.nist.gov/vuln/detail/CVE-2026-32282
go.dev/cl/763761
go.dev/issue/78293
pkg.go.dev/vuln/GO-2026-4864
access.redhat.com/security/cve/CVE-2026-32283
cve.org/CVERecord?id=CVE-2026-32283
nvd.nist.gov/vuln/detail/CVE-2026-32283
go.dev/cl/763767
go.dev/issue/78334
pkg.go.dev/vuln/GO-2026-4870
access.redhat.com/security/cve/CVE-2026-33186
cve.org/CVERecord?id=CVE-2026-33186
nvd.nist.gov/vuln/detail/CVE-2026-33186
github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3
access.redhat.com/security/cve/CVE-2026-33413
cve.org/CVERecord?id=CVE-2026-33413
nvd.nist.gov/vuln/detail/CVE-2026-33413
github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg
access.redhat.com/security/cve/CVE-2026-33551
cve.org/CVERecord?id=CVE-2026-33551
nvd.nist.gov/vuln/detail/CVE-2026-33551
openwall.com/lists/oss-security/2026/04/07/12
security.openstack.org/ossa/OSSA-2026-005.html
access.redhat.com/security/cve/CVE-2026-33810
cve.org/CVERecord?id=CVE-2026-33810
nvd.nist.gov/vuln/detail/CVE-2026-33810
go.dev/cl/763763
go.dev/issue/78332
pkg.go.dev/vuln/GO-2026-4866
access.redhat.com/security/cve/CVE-2026-33811
cve.org/CVERecord?id=CVE-2026-33811
nvd.nist.gov/vuln/detail/CVE-2026-33811
go.dev/cl/767860
go.dev/issue/78803
groups.google.com/g/golang-announce/c/qcCIEXso47M
pkg.go.dev/vuln/GO-2026-4981
access.redhat.com/security/cve/CVE-2026-39821
cve.org/CVERecord?id=CVE-2026-39821
nvd.nist.gov/vuln/detail/CVE-2026-39821
go.dev/cl/767220
go.dev/issue/78760
groups.google.com/g/golang-announce/c/iI-mYSI0lu8
pkg.go.dev/vuln/GO-2026-5026
access.redhat.com/security/cve/CVE-2026-42789
cve.org/CVERecord?id=CVE-2026-42789
nvd.nist.gov/vuln/detail/CVE-2026-42789
cna.erlef.org/cves/CVE-2026-42789.html
github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db
github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd
github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq
osv.dev/vulnerability/EEF-CVE-2026-42789
erlang.org/doc/system/versions.html
access.redhat.com/security/cve/CVE-2026-42790
cve.org/CVERecord?id=CVE-2026-42790
nvd.nist.gov/vuln/detail/CVE-2026-42790
cna.erlef.org/cves/CVE-2026-42790.html
github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759
github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a
github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457
github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447
osv.dev/vulnerability/EEF-CVE-2026-42790
access.redhat.com/security/cve/CVE-2026-43001
cve.org/CVERecord?id=CVE-2026-43001
nvd.nist.gov/vuln/detail/CVE-2026-43001
bugs.launchpad.net/keystone/+bug/2149775
review.opendev.org/c/openstack/keystone/+/985804
access.redhat.com/security/cve/CVE-2026-44393
cve.org/CVERecord?id=CVE-2026-44393
nvd.nist.gov/vuln/detail/CVE-2026-44393
bugs.launchpad.net/oslo.messaging/+bug/2150316
wiki.openstack.org/wiki/OSSN/OSSN-0096
ubuntu.com/security/CVE-2026-34881
openwall.com/lists/oss-security/2026/03/19/3
ubuntu.com/security/notices/USN-8199-1
Left out here: 49 versions. The JSON record has them.