CVE-2026-24708
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
An issue in OpenStack Nova before versions 30.2.2, 31.2.1, and 32.1.1 allows a user to trigger an unsafe image resize operation by writing a malicious QCOW header to a root or ephemeral disk. This causes the Flat image backend to call qemu-img without format restrictions, potentially destroying data on the host system.
Risk Assessment
The risk for the organization includes potential data destruction on compute nodes by an unauthorized user, which could disrupt services and lead to data loss.
Recommendation
Immediately upgrade OpenStack Nova to version 30.2.2, 31.2.1, or 32.1.1 depending on the branch in use. Also review the Flat image backend configuration and consider using more secure backends.
Other vulnerabilities in OpenStack Nova
See all- CVE-2017-17051High
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. An authenticated user may repeatedly rebuild an instance with new images, leading to untracked resource consumption on a hypervisor host, resulting in denial of service.
- CVE-2017-7214Critical
An issue was discovered in exception_wrapper.py in OpenStack Nova versions 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.
Original NVD description (English source)
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.