fr Sign in

5.4 Medium

CVE-2026-46448 In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data

Description

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

Affected products and versions

Product	Affected versions	Fixed in
Nova 33.0	33.0.0 → < 33.0.2	33.0.2
Nova 32.0	32.0.0 → < 32.2.1	32.2.1
Nova 18.0	18.0.0 → < 31.3.1	31.3.1

References

bugs.launchpad.net bugs.launchpad.net
www.openwall.com www.openwall.com

Timeline

Published June 16, 2026
Last modified June 17, 2026

The 2 CVEs of Nova →

CVE-2026-24708 An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1 8.2 High

Track this CVE