PT-2026-49828 · Openstack+2 · Openstack Nova+2

CVE-2026-46448

Published

2026-06-16

Updated

2026-07-13

CVSS v3.1

8.5

High

Vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions OpenStack Nova versions prior to 33.0.2

Description The server create API does not strip certain hint data, which results in the created instance having no Placement allocation.

Recommendations Update to version 33.0.2.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-46448

GHSA-MFG3-P6M3-GJGR

PYSEC-2026-2686

USN-8434-1

Linuxmint

Openstack Nova

Ubuntu