CVE-2026-34881: 
NixOS vulnerability analysis and mitigation

CVE-2026-34881 is a Server-Side Request Forgery (SSRF) vulnerability in OpenStack Glance, the image service component of OpenStack. By leveraging HTTP redirects, an authenticated user can bypass URL validation checks and redirect image import requests to internal services. The vulnerability affects OpenStack Glance versions before 29.1.1, 30.x before 30.1.1, and exactly 31.0.0; Glance versions 29.2.0, 30.2.0, and 31.1.0 are patched. It was published on March 31, 2026, with a CVSS v3.1 base score of 5.0 (Medium) (GitHub Advisory, OpenStack OSSA).

The root cause is classified as CWE-918 (Server-Side Request Forgery), where the Glance image import functionality fails to adequately validate or follow HTTP redirect chains before making outbound requests. An attacker supplies a URL to a controlled external server that issues an HTTP redirect to an internal network resource; Glance follows the redirect without re-validating the destination against its allowlist. The affected attack surface is limited to three specific import mechanisms: the web-download import method, the glance-download import method, and the optional ovf_process image import plugin (disabled by default). Exploitation requires authenticated access (low privileges) and no user interaction, and the scope change indicates that resources outside the Glance security boundary can be affected (GitHub Advisory, OpenStack OSSA).

A successfully exploited vulnerability allows an authenticated attacker to interact with internal services that are not intended to be publicly accessible, such as metadata APIs, internal management endpoints, or other microservices within the OpenStack deployment network. The primary impact is on integrity (low) and scope change, meaning the attacker can cause Glance to issue requests on their behalf to internal infrastructure. Confidentiality impact is rated None in the CVSS score, though indirect information disclosure from internal service responses may be possible depending on deployment configuration. Availability is not directly impacted (GitHub Advisory, OpenStack OSSA).

1. Authenticate: Obtain valid OpenStack credentials (any authenticated user with access to the Glance image import API).
2. Set up redirect server: Deploy an attacker-controlled HTTP server that responds to requests with an HTTP 301/302 redirect pointing to a target internal service URL (e.g., http://169.254.169.254/latest/meta-data/ for cloud metadata, or an internal management endpoint).
3. Initiate image import: Use the Glance API to trigger an image import using the web-download or glance-download method, supplying the URL of the attacker-controlled redirect server as the image source.
4. Bypass URL validation: Glance validates the initially supplied URL (the attacker's server), which passes validation. When Glance fetches the URL, the attacker's server issues an HTTP redirect to the internal target.
5. Access internal service: Glance follows the redirect to the internal service URL without re-validating the destination, effectively proxying the request to the internal resource on behalf of the attacker.
6. Observe response: Depending on error handling and logging, the attacker may be able to infer information about internal services or cause unintended interactions with internal infrastructure (GitHub Advisory, OpenStack OSSA).

• Network: Outbound HTTP requests from the Glance service to internal IP ranges (e.g., RFC 1918 addresses, link-local 169.254.x.x) following an image import operation; HTTP requests from Glance to cloud metadata endpoints (e.g., 169.254.169.254).
• Logs: Glance API logs showing image import requests (web-download or glance-download) with external URLs that subsequently result in connections to internal hosts; HTTP 3xx redirect responses logged from external sources during import operations.
• Application Logs: Errors or unusual responses in Glance logs (glance-api.log) related to image import tasks connecting to unexpected internal destinations.
• Process/Service Behavior: Repeated failed or unusual image import tasks initiated by the same authenticated user account, particularly targeting the web-download, glance-download, or ovf_process import methods.

Upgrade OpenStack Glance to the patched versions: 29.2.0 (for the 29.x branch), 30.2.0 (for the 30.x branch), or 31.1.0 (for the 31.x branch) (GitHub Advisory). If immediate patching is not feasible, disable the ovf_process image import plugin if it is enabled, and restrict access to the web-download and glance-download import methods to trusted users only. Additionally, implement network segmentation to prevent the Glance service from making outbound connections to internal management networks or cloud metadata endpoints (OpenStack OSSA).

The OpenStack security team published an official security advisory (OSSA-2026-004) coordinated with the CVE disclosure on March 31, 2026 (OpenStack OSSA). The vulnerability was reviewed and published in the GitHub Advisory Database and received coverage from Linux security news outlets and community blogs, including a technical post on the OpenStack Glance image flaws (Linux Security). Debian also addressed the issue in a subsequent release update (Debian News). Community reaction has been measured given the medium severity and authentication requirement.