CVE-2026-34881: CWE-918 Server-Side Request Forgery (SSRF) in OpenStack Glance
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
AI Analysis
Technical Summary
CVE-2026-34881 is a Server-Side Request Forgery (SSRF) vulnerability in OpenStack Glance affecting versions before 29.1.1, 30.x before 30.1.1, and 31.0.0. The vulnerability arises because HTTP redirects can be used by an authenticated user to bypass URL validation checks, enabling redirection to internal services. The flaw impacts only the glance image import functionality, specifically the web-download and glance-download import methods and the optional ovf_process image import plugin. This vulnerability has a CVSS 3.1 base score of 5.0 (medium severity) with an attack vector of network, low attack complexity, requiring low privileges and no user interaction, and results in a scope change with no confidentiality or availability impact but with integrity impact.
Potential Impact
An authenticated user can exploit this SSRF vulnerability to redirect image import requests to internal services, potentially causing unauthorized interactions with internal network resources. The impact is limited to integrity as per the CVSS vector, with no direct confidentiality or availability impact reported. The vulnerability affects only specific image import methods and an optional plugin in OpenStack Glance.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The Red Hat advisory URL is provided for updates: https://access.redhat.com/security/cve/CVE-2026-34881. Until an official fix is confirmed, restrict access to the affected image import functionalities and monitor usage by authenticated users to mitigate potential exploitation.
CVE-2026-34881: CWE-918 Server-Side Request Forgery (SSRF) in OpenStack Glance
Description
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
CVSS v3.1
Score 5.0medium
Affected software
pkg:github/openstack/glanceRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-34881 is a Server-Side Request Forgery (SSRF) vulnerability in OpenStack Glance affecting versions before 29.1.1, 30.x before 30.1.1, and 31.0.0. The vulnerability arises because HTTP redirects can be used by an authenticated user to bypass URL validation checks, enabling redirection to internal services. The flaw impacts only the glance image import functionality, specifically the web-download and glance-download import methods and the optional ovf_process image import plugin. This vulnerability has a CVSS 3.1 base score of 5.0 (medium severity) with an attack vector of network, low attack complexity, requiring low privileges and no user interaction, and results in a scope change with no confidentiality or availability impact but with integrity impact.
Potential Impact
An authenticated user can exploit this SSRF vulnerability to redirect image import requests to internal services, potentially causing unauthorized interactions with internal network resources. The impact is limited to integrity as per the CVSS vector, with no direct confidentiality or availability impact reported. The vulnerability affects only specific image import methods and an optional plugin in OpenStack Glance.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The Red Hat advisory URL is provided for updates: https://access.redhat.com/security/cve/CVE-2026-34881. Until an official fix is confirmed, restrict access to the affected image import functionalities and monitor usage by authenticated users to mitigate potential exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-03-31T05:29:07.975Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-34881","vendor":"Red Hat"}]
Threat ID: 69cb614de6bfc5ba1ddc7ec7
Added to database: 03/31/2026, 05:53:17 UTC
Last enriched: 07/15/2026, 09:04:09 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 149
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.