CVE-2026-94571 | OpenStack Octavia up to 16.0.x/17.0.0/18.0.0 Amphora provider driver redirect_url/redirect_prefix code injection

A vulnerability has been found in OpenStack Octavia up to 16.0.x/17.0.0/18.0.0 and classified as very critical. This vulnerability affects unknown code of the component Amphora provider driver. The manipulation of the argument redirect_url/redirect_prefix leads to code injection.

This vulnerability is uniquely identified as CVE-2026-94571. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More