CVE-2026-77648

Received Received - Intake

OpenStack Glance SSRF via Deprecated Import Tasks API

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: MITRE

Description

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-77648

EUVD

EUVD-2026-63759

Affected Vendors & Products

Vendor	Product	Version / Range
openstack	glance	32.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This vulnerability in OpenStack Glance through version 32.0.0 allows an admin to exploit the /v2/tasks API to perform Server-Side Request Forgery (SSRF). By submitting type=import tasks, the admin can bypass import filtering options and fetch internal URLs from the Glance service network, provided they use http:// or https://.

Detection Guidance

This vulnerability involves the /v2/tasks API in OpenStack Glance allowing SSRF via bypassed import filtering. Detection requires checking Glance API logs for suspicious task requests with type=import and unusual URL targets. Review admin access logs for unauthorized API calls to /v2/tasks with import type.

Impact Analysis

This vulnerability primarily impacts OpenStack Glance deployments where an attacker with admin privileges can access internal URLs. This could lead to unauthorized access to internal services or data, potentially exposing sensitive information or enabling further attacks within the network.

Compliance Impact

This vulnerability allows an admin to bypass import filtering and fetch internal URLs via SSRF, which could expose sensitive data. This may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Upgrade OpenStack Glance to a version beyond 32.0.0 to address the SSRF vulnerability in the /v2/tasks API. Ensure import_filtering_opts are properly enforced and restrict admin access to the API.

Hi! I’m here to help you understand CVE-2026-77648. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70