← Back

CVE-2026-46448

nvd nist
Published: Jun 16, 2026Modified: Jun 26, 2026

JSON object

Loading...
8.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
Exploitability: 3.1 / Impact: 4.7
Source: NVD

Description

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

Affected (3)

Products: Openstack: Nova
Openstack
1 product
Nova
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Openstack
Nova
From 18.0.0 to 31.3.1
Nova
From 32.0.0 to 32.2.1
Nova
From 33.0.0 to 33.0.2

Related CWEs

CWE-669
Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (4)

Source: cve@mitre.org
ExploitIssue TrackingThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.