CVE-2026-97149 | OpenStack Swift up to 2.35.4/2.36.3/2.37.3/2.38.1 Tempurl X-Copy-From privileges management

September 24, 2026 Yanac

A vulnerability marked as critical has been reported in OpenStack Swift up to 2.35.4/2.36.3/2.37.3/2.38.1. The impacted element is an unknown function of the component Tempurl. This manipulation of the argument X-Copy-From causes improper privilege management.

This vulnerability appears as CVE-2026-97149. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More