Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-4972

32
FAUCET Score

CVE-2016-4972 is a critical vulnerability affecting OpenStack Murano, Murano-dashboard, and python-muranoclient across Liberty and Mitaka releases. The flaw stems from improper use of YAML loaders when parsing MuranoPL and UI files, enabling remote attackers to create arbitrary Python objects and execute arbitrary code through crafted extended YAML tags in package UI definitions. With a CVSS score of 9.8 (Critical), this vulnerability allows for complete compromise of confidentiality, integrity, and availability with no authentication or user interaction required. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.0.0CPE matchmatch criteria
cpe:2.3:a:openstack:mitaka-murano:*:*:*:*:*:*:*:*
<= 1.0.2CPE matchmatch criteria
cpe:2.3:a:openstack:murano:*:*:*:*:*:*:*:*
<= 1.0.2CPE matchmatch criteria
cpe:2.3:a:openstack:murano-dashboard:*:*:*:*:*:*:*:*
<= 0.7.2CPE matchmatch criteria
cpe:2.3:a:openstack:python-muranoclient:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
3.17%
Probability of exploitation in next 30 days
EPSS Percentile
86.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0317 is in the 78th percentile among its peer group of 36,829 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

pippatch availablevia ghsa
Product: muranoFixed in: 1.0.3
pippatch availablevia ghsa
Product: murano-dashboardFixed in: 1.0.3
pippatch availablevia ghsa
Product: python-muranoclientFixed in: 0.7.3
pippatch availablevia ghsa
Product: murano-dashboardFixed in: 2.0.1
pippatch availablevia ghsa
Product: python-muranoclientFixed in: 0.8.5

Vendor Advisories (2)

pipGHSA-87r7-q54j-f9qgcritical

OpenStack Murano Code Execution

May 17, 2022
redhatCVE-2016-4972Important

openstack-murano: RCE via usage of insecure YAML tags

Jun 23, 2016

References

bugs.launchpad.net / murano/+bug/1586079
PatchVendor Advisory
bugs.launchpad.net / python-muranoclient/+bug/1586078
PatchVendor Advisory
openwall.com / lists/oss-security/2016/06/23/8
PatchThird Party Advisory