Security Advisory

CVE-2026-77648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-20 22:37:31

Last updated 2026-08-20 22:37:31

Assigner mitre

CVSS score 2.2

State PUBLISHED

Description

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.

← Browse all CVEs View on cve.org ↗