Threats tagged 'ghsa-33h9-ppgm-5785'

CVE-2026-94571 is a critical code injection vulnerability in OpenStack Octavia affecting the Amphora provider driver before version 18.0.1. The flaw allows an authenticated project member who owns a load balancer to inject arbitrary HAProxy directives via crafted L7 policy redirect_url and redirect_prefix fields. This occurs because control characters are not properly rejected and are written raw into the HAProxy configuration. Only deployments using the Amphora provider are impacted.