Auth bypass in Openstack Swift
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-…
Vulnerability class: Broken Access Control
Affected products
- Openstack Swift — versions 2.18.0, 2.36.0, 2.37.0
Weakness classification (CWE)
References
- cve@mitre.org (issue-tracking)
- cve@mitre.org (mailing-list, vendor-advisory)
- cve@mitre.org (vendor-advisory)