Nova vulnerabilities

1 known vulnerability in Nova from OpenStack. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Nova: Incorrect Resource Transfer Between Spheres

  CVE-2026-24708Feb 18, 2026OpenStack

  An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without