CVE-2026-71195
Description
A flaw was found in OpenStack Manila. When a file share is configured with public visibility, the service fails to verify project ownership before authorizing management operations. An authenticated user in a separate project can exploit this issue by submitting modification requests for public shares they do not own. This can lead to unauthorized data access or a denial of service (DoS) by allowing unauthorized users to alter access permissions, manipulate export metadata, or delete the share.
Statement
This vulnerability is rated as Critical for Red Hat OpenStack Platform because any authenticated tenant user can breach multi-tenant boundary isolation and manipulate shared storage resources belonging to different projects without requiring administrative privileges. Due to improper authorization verification in the Manila shared file system service, non-owner project members can alter access permissions, manipulate export metadata, generate replicas, or initiate soft deletion on shares configured with public visibility. Exploitation is limited to deployments where the Manila service is active and where at least one file share has been designated as public.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 8.8 | N/A | 9.9 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Changed |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Acknowledgements
Red Hat would like to thank Chen YuXiang (Institute of Computing Technology) for reporting this issue.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
