CVE-2026-46448

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data.

Nova

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

16. Jun 2026

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2026/11/msg00026.html
• Hinweis
  http://www.openwall.com/lists/oss-security/2026/06/16/5
• Hinweis
  https://bugs.launchpad.net/nova/+bug/2151252
• Hinweis
  https://www.openwall.com/lists/oss-security/2026/06/16/5
• NVD
  CVE-2026-46448