Vulnerabilities of OpenStack Glance
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-71198 | In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location… | 7.0 High | Sep 14, 2026 |
| CVE-2026-77648 | In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts,… | 2.2 Low | Aug 20, 2026 |
| CVE-2026-34881 | OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF) | 5.0 Medium | Mar 31, 2026 |