OpenStack Nova versions before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1 contain a vulnerability that allows an authenticated user to access potentially sensitive data by supplying a crafted QCOW2 or VMDK image referencing files on the server. This issue arises from an incomplete fix of previous vulnerabilities (CVE-2022-47951 and CVE-2024-32498) and affects all Nova deployments.