Skip to content
Sign in
5.4 Medium

CVE-2026-46448 In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data

Description

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

Affected products and versions

Product Affected versions Fixed in
Nova 33.0 33.0.0 → < 33.0.2 33.0.2
Nova 32.0 32.0.0 → < 32.2.1 32.2.1
Nova 18.0 18.0.0 → < 31.3.1 31.3.1

Other CVEs of Nova

The 2 CVEs of Nova →
CVE-2026-24708 An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1 8.2 High
Track this CVE