CVE-2026-24708Disclosure

LOWCVSS 8.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-669CWE-73

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-02-18); latest day: 2
5 total mentions across 3 days

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-17	1	General1
2026-02-18	2	Disclosure2
2026-02-24	2	Disclosure2

Full discourse5 posts

Open Source Security mailing list@oss_security234d
Disclosure
CVE-2026-24708,OSSA-2026-002: OpenStack Nova: calls qemu-img without format restrictions for resize https://www.openwall.com/lists/oss-security/2026/02/17/7 malicious QCOW header ... may convince Nova's flat image backend to call qemu-img without a format restriction resulting in an unsafe image resize operation
Post summary
The post announces CVE-2026-24708 in OpenStack Nova, detailing that unrestrained qemu-img calls can lead to unsafe image resizing when a malicious QCOW header is used, with no evidence of exploitation or patch yet.
01042442
4.4K followersView on X
CVE@CVEnew228d
Disclosure
CVE-2026-24708 An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and th… https://www.cve.org/CVERecord?id=CVE-2026-24708
Post summary
The post announces a vulnerability in OpenStack Nova that allows writing a malicious QCOW header to a root or epoxy disk, but it provides only a brief technical description without any PoC, exploit code, or patch information.
00010406
56.5K followersView on X
Infoflowcloud@infoflowcloud228d
Disclosure
🚨*CVE* CVE-2026-24708 An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and th… https://www.cve.org/CVERecord?id=CVE-2026-24708 ----- Traducción: Se descubrió un pr… http://infoflow.cloud`
Post summary
A vulnerability in OpenStack Nova (CVE-2026-24708) allows malicious QCOW header writes to root or ephemer disks, affecting versions before 30.2.2, 31.2.1, and 32.1.1.
0000048
53 followersView on X
The Hacker Wire@TheHackerWire233d
Disclosure
🟠 CVE-2026-24708 - High An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a... https://www.thehackerwire.com/vulnerability/CVE-2026-24708/ https://t.co/cpH9BP5Qpc
Post summary
The post announces a high‑severity vulnerability in OpenStack Nova (CVE‑2026‑24708) that allows an attacker to write a malicious QCOW header to a root or temporary disk and trigger a resize, potentially enabling further exploitation.
0000037
112 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds234d
General
CVE-2026-24708 [OSSA-2026-002] OpenStack Nova https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24708 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post merely references CVE‑2026‑24708 with links to a vulnerability database, offering no substantive details about exploitation, mitigation, or technical specifics.
0000045
4.0K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-24708

Open Source Security mailing list@oss_securityDisclosure

The post announces CVE-2026-24708 in OpenStack Nova, detailing that unrestrained qemu-img calls can lead to unsafe image resizing when a malicious QCOW header is used, with no evidence of exploitation or patch yet.

CVE@CVEnewDisclosure

The post announces a vulnerability in OpenStack Nova that allows writing a malicious QCOW header to a root or epoxy disk, but it provides only a brief technical description without any PoC, exploit code, or patch information.

Infoflowcloud@infoflowcloudDisclosure

A vulnerability in OpenStack Nova (CVE-2026-24708) allows malicious QCOW header writes to root or ephemer disks, affecting versions before 30.2.2, 31.2.1, and 32.1.1.

The Hacker Wire@TheHackerWireDisclosure

The post announces a high‑severity vulnerability in OpenStack Nova (CVE‑2026‑24708) that allows an attacker to write a malicious QCOW header to a root or temporary disk and trigger a resize, potentially enabling further exploitation.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The post merely references CVE‑2026‑24708 with links to a vulnerability database, offering no substantive details about exploitation, mitigation, or technical specifics.