Executive brief
OpenStack Glance is an image service that stores and manages virtual machine images. The deprecated tasks API allows administrators to import images from URLs, but a flaw in the import filtering lets admins bypass security restrictions and access internal URLs within the Glance service network—a server-side request forgery (SSRF) vulnerability. While restricted to admin users, this could expose sensitive internal services.
Technical details
The vulnerability is a server-side request forgery (SSRF) in OpenStack Glance's legacy /v2/tasks API. The tasks import path uses a permissive URI validator that only checks for http:// or https:// prefixes, allowing it to bypass the host and port restrictions enforced by the modern web-download import mechanism. An authenticated administrator can craft type=import tasks that fetch internal URLs from the Glance service network. The API is admin-only and has been deprecated for several releases. Patches are available in all supported release branches (2025.1, 2025.2, 2026.1, and 2026.2).
Affected products
- OpenStack Glance >=30.0.0 <30.3.0, >=31.0.0 <31.1.1, ==32.0.0
Timeline
- 2026-08-11: disclosed
- 2026-08-20: advisory