redhat/openstack-manila vulnerabilities

Latest redhat/openstack-manila CVEs

Newest publication first

1. CVE-2026-71195 manila: manila: Public Manila Share Allows Cross-Project Access-Rule and Export-Metadata Writes

   Published 2026-10-21

   Critical·CVSS 9.9 EPSS 0.48%

   In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.