Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-24708

30
FAUCET Score

CVE-2026-24708 is a high-severity vulnerability affecting OpenStack Nova versions before 30.2.2, 31.2.1, and 32.1.1, specifically impacting compute nodes configured with the Flat image backend (use_cow_images=False). A malicious user can craft a QCOW header on a disk, triggering an unsafe image resize operation via qemu-img without format restrictions, potentially leading to data destruction on the host system. With a CVSS score of 8.2 (HIGH), this vulnerability has a network attack vector and high attack complexity, allowing a low-privileged attacker to achieve high integrity and availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 0, < 30.2.2CPE match
cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
>= 31.0.0, < 31.2.1CPE match
cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*
>= 32.0.0, < 32.1.1CPE match
cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.2HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.8
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.34%
Probability of exploitation in next 30 days
EPSS Percentile
26.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0034 is in the 17th percentile among its peer group of 1,162 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

redhatno patchvia redhat_api
Product: Red Hat OpenStack Platform 13 (Queens)Fixed in: rhosp13/openstack-nova-compute
redhatno patchvia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: rhosp-rhel8/openstack-nova-compute
redhatno patchvia redhat_api
Product: Red Hat OpenStack Platform 17.1Fixed in: rhosp-rhel9/openstack-nova-compute
redhatno patchvia redhat_api
Product: Red Hat OpenStack Platform 18.0Fixed in: rhosp-rhel9/openstack-nova-compute

Vendor Advisories (2)

pipGHSA-m4f3-qp2w-gwh6high

OpenStack Nova calls qemu-img without format restrictions for resize

Feb 18, 2026
redhatCVE-2026-24708Important

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

Feb 17, 2026

References

access.redhat.com / errata/RHSA-2026:7884
access.redhat.com / security/cve/CVE-2026-24708
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-24708.json
lists.debian.org / debian-lts-announce/2026/02/msg00025.html
bugs.launchpad.net / nova/+bug/2137507
openwall.com / lists/oss-security/2026/02/17/7