OpenStack Glance SSRF flaws expose internal URLs and image data

OpenStack has issued OSSA-2026-038 for three server-side request forgery flaws in Glance, tracked as CVE-2026-71196, CVE-2026-71197, and CVE-2026-71198. Authenticated users on affected clouds can coerce the image service into fetching internal URLs, including cloud metadata endpoints, and in some setups retrieve the responses as downloadable image data.

Sergey Kanibor (Luntry), Sami Yessou (switch.ch), and Abhishek Kekane (Red Hat) reported the issues. The web-download import path ships with weak default host filtering, so callers can aim it at arbitrary internal addresses. Its URI checks also skip DNS resolution before applying those filters, which opens bypasses through attacker-controlled names and DNS rebinding. Separately, when the HTTP store is enabled, the HTTP image location API applies no host filtering at all; Glance stores the fetched body as image content, turning blind SSRF into full-read exfiltration.

Any Glance deployment that uses web-download import or HTTP image location APIs is in scope. Fixed packages cover the long-lived and current stable lines (versions before 30.2.1, 31.1.1, and 32.0.1 in the respective series). Operators should upgrade and review whether those import and store features remain necessary in their environments.