[OSSA-2026-041] OpenStack Swift: Cross-container information disclosure via Swift tempurl (CVE-2026-97149)
OpenStack Swift tempurl bug CVE-2026-97149 can leak information across containers.
OpenStack published OSSA-2026-041 for CVE-2026-97149, a cross-container information disclosure in Swift's tempurl feature. The issue, reported by Oren Yomtov of ACT Security, affects Swift from version 1.4.6, and the advisory lists the 2.36.0 and 2.37.0 lines and releases before 2.38.2. The posted notice does not say the flaw is being exploited.
51