[OSSA-2026-041] OpenStack Swift: Cross-container information disclosure via Swift tempurl (CVE-2026-97149)
OpenStack Swift tempurl bug CVE-2026-97149 can leak information across containers.
51
Organization
ACT Security
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 24, 2026
- Last mentionedSep 24, 2026
Timeline
1 articles · newest firstRelated CVEs
by mentions- In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests
Appears with
- OpenStackvendor · 1
- OpenStack Swiftproduct · 1
- OpenStackorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.