Skip to content
OpenAdvisories

Product · OpenStack

Nova

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-24708

    OpenStack Nova calls qemu-img without format restrictions for resize

    An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img withou…

    OpenStack Nova nova nova Debian Ubuntu PyPI