As cited
Copy frozen at (site build).
vulnerabilities
[OSSA-2026-046] OpenStack Manila: Manila allows cross-project public-share and export-metadata changes (CVE-2026-71195)
OpenStack Manila versions 1.0.0 through 23.0.0 contain a vulnerability that allows cross-project modification of public share and export metadata settings. An attacker with credentials in one project could alter configurations in another project without proper authorization.
Why it matters: Organizations running affected Manila versions need to patch immediately, as this vulnerability allows lateral privilege escalation across project boundaries in OpenStack deployments.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
[OSSA-2026-046] OpenStack Manila: Manila allows cross-project public-share and export-metadata changes (CVE-2026-71195)
OpenStack Manila contains a vulnerability that allows cross-project changes to public share and export metadata settings. The flaw affects Manila versions 1.0.0 through 23.0.0 across multiple release branches, with patches available in versions 20.0.3, 21.0.3, and 22.0.2.
Why it matters: OpenStack operators running affected Manila versions face exposure to unauthorized cross-project modifications of shared storage configurations; patching to the fixed versions is required to prevent privilege boundary violations.
- Source published
- First seen by Cybersecurity Tracker