CVE-2026-77648
LOW
NVD
CVSS Score
2.2
Severity
LOW
Published
Aug 20, 2026
Vendor
unknown
Description
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.