Vulnerability in Openstack Swift
CVE-2026-71190
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The "qdtext" pattern (?:[^"]|\\.)* allows an unauthenticated remote attacker to send a…
Vulnerability class: ReDoS (Regular Expression Denial of Service)
Affected products
- Openstack Swift — versions 1.9.1, 2.36.0, 2.37.0
Weakness classification (CWE)
References
- cve@mitre.org (issue-tracking)
- cve@mitre.org (mailing-list, vendor-advisory)
- cve@mitre.org (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108