CVE-2026-34881 | OpenStack Glance up to 29.1.0/30.1.0/31.0.0 ovf_process Image Import Plugin server-side request forgery

March 31, 2026 Yanac

A vulnerability identified as critical has been detected in OpenStack Glance up to 29.1.0/30.1.0/31.0.0. Affected by this vulnerability is an unknown functionality of the component ovf_process Image Import Plugin. Performing a manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-34881. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More