Vulnpedia
← Search CVEs

CVE-2026-71195

CRITICAL 9.9

Published 2026-10-21 · Last modified 2026-10-21

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual owner. This affects the following operations: allow_access: grant data-plane read/write access to another tenant's share; deny_access: revoke the owner's existing access rules; update_access: escalate access level (e.g., ro to rw); create_share_backup: exfiltrate share data via a backup created under the attacker's project; soft_delete: move a foreign share to the recycle bin; restore: interfere with the owner's deletion workflow; export location metadata: create, update, and delete metadata on foreign export locations; access rule listing: disclose IPs, usernames, and CephFS keys. Any authenticated project member can exploit these operations on any public share. The share UUID is visible since the share is public.

ELEVATED IMPACT

Severe if exploited (CVSS 9.9), but no known exploitation and low modeled probability. Patch on a normal cadence.

Exploitation likelihood

0.5%chance of exploitation in 30 days · 41st percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

9.9CVSS 3.1 · CRITICAL

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Openstack

Products Manila

Weakness (CWE)

  • CWE-863: Incorrect Authorization

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References and research data (JSON)

Vendor product assessments

  • openstack-manila as a component of Red Hat OpenStack Platform 13 (Queens) · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • openstack-manila-share as a component of Red Hat OpenStack Platform 13 (Queens) · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila-share

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • openstack-manila.src as a component of Red Hat OpenStack Platform 13 (Queens) · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila?arch=src

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • python-manila as a component of Red Hat OpenStack Platform 13 (Queens) · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/python-manila

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • python-manila-tests as a component of Red Hat OpenStack Platform 13 (Queens) · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/python-manila-tests

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • openstack-manila-share as a component of Red Hat OpenStack Platform 16.2 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila-share

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • openstack-manila.src as a component of Red Hat OpenStack Platform 16.2 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila?arch=src

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • python3-manila as a component of Red Hat OpenStack Platform 16.2 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/python3-manila

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • openstack-manila-share as a component of Red Hat OpenStack Platform 17.1 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila-share

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • openstack-manila.src as a component of Red Hat OpenStack Platform 17.1 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila?arch=src

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • python3-manila as a component of Red Hat OpenStack Platform 17.1 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/python3-manila

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00
  • openstack-manila.src as a component of Red Hat OpenStack Platform 18.0 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/openstack-manila?arch=src

    • none available: Affected
    Red Hat · CVE-2026-71195 · Updated 2026-10-21T15:00:06+00:00

All CVSS metrics

  • CRITICAL 9.9 v3.1 · CNA Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
  • CRITICAL 9.9 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

Advisories

Technical & other

Sources: NVD · CVE.org · EPSS