Executive brief
OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme
Affected products
- PyPI glance
Junglewise Threat Intelligence
CVE-2015-1195: PYSEC-2026-815 - OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme
CVE-2015-1195 · Severity: info · Published 2026-07-06
Technologies: glance (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2493 - OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
- PYSEC-2026-868 - OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
- PYSEC-2026-817 - OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
- PYSEC-2026-816 - OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions
- PYSEC-2026-812 - OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service