Executive brief
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Affected products
- PyPI nova
Junglewise Threat Intelligence
CVE-2024-40767: PYSEC-2026-1709 - OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
CVE-2024-40767 · Severity: low · CVSS 3.1 · Published 2026-07-07
Vendors: PyPI.
Related threats
- PYSEC-2026-2493 - OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
- PYSEC-2026-868 - OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
- PYSEC-2026-882 - OpenStack Nova Changing vnic_type breaks compute service restart
- PYSEC-2026-857 - OpenStack Nova can leak consoleauth token into log files
- PYSEC-2026-862 - OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors