6

CVE-2026-71191: openstack swift Incorrect Authorization

CVSS: 6.0v4.0MediumAwaiting analysis
AliasesUBUNTU-CVE-2026-71191DEBIAN-CVE-2026-71191
Published 05-08-2026Last modified 06-08-2026
Open JSON

Vulnerability summary

CVE-2026-71191 is a medium (CVSS 6.0) Incorrect Authorization vulnerability in openstack swift. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.7% of scored vulnerabilities.

Overall risk
24/100
0100
Low · default modelHow is this calculated?
CVSS score
6.0/10
010
Medium · v4.0 (CVE.org)
EPSS score
0.56%
0%100%
Low · +0.28 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 05-08-2026
    PublishedVulnerability first disclosed.
  2. 06-08-2026
    Last modifiedVulnerability information updated.

Description

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy from an arbitrary source object using the signer's authorization context. The attacker can read any object the signer has access to, provided the target project_id, container name, and object name are known. This affects all deployments using the default s3_acl=false configuration.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.56%

Chance of exploitation in the next 30 days

Percentile

46%

Versus all other CVEs

30-day change

+0.28 pp

From 0.28% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.56%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • swift< 2.30.1-0+deb12u3 | < 2.35.1-0+deb13u3 | < 2.37.1-6
Openstack1 product
  • swift≥ 2.18.0, < 2.35.4 | ≥ 2.36.0, < 2.36.3 | ≥ 2.37.0, < 2.37.3 | 2.38.0
Ubuntu1 product
  • swiftAll versions (No fix recorded)

3 vendors · 3 products

References

7 links