Executive brief
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Affected products
- PyPI cinder
- PyPI nova
- PyPI glance
Junglewise Threat Intelligence
CVE-2022-47951: PYSEC-2026-868 - OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
CVE-2022-47951 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: cinder (PyPI), nova (PyPI), glance (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2493 - OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
- PYSEC-2026-1709 - OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
- PYSEC-2026-882 - OpenStack Nova Changing vnic_type breaks compute service restart
- PYSEC-2026-891 - Openstack cinder Improper handling of ScaleIO backend credentials
- PYSEC-2026-857 - OpenStack Nova can leak consoleauth token into log files