{}

{}

{}

{"acknowledgement": "Upstream acknowledges Cyril Roelandt (Red Hat / OpenStack Glance Core Security Team) as the original reporter.", "bugzilla": {"description": "openstack-glance: openstack-glance: SSRF via web-download import due to empty default host filters", "id": "2524516", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524516"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.7", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-918", "details": ["A server-side request forgery (SSRF) vulnerability was found in OpenStack Glance. The web-download image import method allows authenticated users to provide a URI from which the Glance service fetches data. Due to insufficient default host filtering, an attacker with standard tenant credentials can make Glance issue HTTP requests to arbitrary internal network hosts, including the cloud metadata service. The fetched response is stored as image data and can be downloaded by the attacker, enabling exfiltration of sensitive internal data such as cloud instance credentials."], "mitigation": {"lang": "en:us", "value": "There is no complete mitigation while web-download remains enabled with default host filters. The following measures reduce risk:\n1. Remove web-download from enabled_import_methods in glance-api.conf if the method is not required:\nenabled_import_methods = glance-direct, copy-image\n2. If web-download is required, configure [import_filtering_opts] disallowed_hosts to block internal ranges (169.254.169.254, 127.0.0.1, RFC1918). Hostname-based filtering may still be bypassable via DNS rebinding.\n3. Disabling the feature entirely is the more robust mitigation."}, "name": "CVE-2026-71196", "package_state": [{"cpe": "cpe:/a:redhat:openstack:13", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 13 (Queens)"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:17.1", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 17.1"}, {"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-09-04T08:24:56Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-71196\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71196\nhttps://bugs.launchpad.net/glance/+bug/2158998\nhttps://redhat.atlassian.net/browse/OSPRH-32932"], "statement": "This vulnerability is rated as Important because an authenticated tenant with the standard member role can use Glance as a full-read SSRF proxy to internal HTTP services, including cloud metadata credentials. No administrative role is required. The web-download import method is enabled by default.\nRed Hat OpenStack Services on OpenShift (RHOSO) and Red Hat OpenStack Platform (RHOSP) deployments that ship OpenStack Glance with web-download enabled are affected. Deployments that have removed web-download from enabled_import_methods, or that have explicitly configured disallowed_hosts to block internal IP ranges, are not affected by the default-config path.", "threat_severity": "Important"}

{}