https://seclists.org/oss-sec/2026/q3/453: [OSSA-2026-030] OpenStack Swift: S3API header authorization bypass (CVE-2026-71191, CVE-2026-71192)
Published Aug 5, 2026
·Updated
Affected Software
1 affected component
Openstack Swift>=2.18.0<2.35.4, >=2.36.0<2.36.3, >=2.37.0<2.37.3, =2.38.0
Frequently Asked Questions
1
What is the severity of OSSA-2026-030?
OSSA-2026-030 is classified as a high-severity vulnerability that allows for unauthorized header access in OpenStack Swift.
2
How do I fix OSSA-2026-030?
To fix OSSA-2026-030, upgrade OpenStack Swift to versions 2.35.4, 2.36.3, or 2.37.3 or later.
3
What versions of OpenStack Swift are affected by OSSA-2026-030?
OSSA-2026-030 affects OpenStack Swift versions >=2.18.0 <2.35.4, >=2.36.0 <2.36.3, and >=2.37.0 <2.37.3.
4
What type of vulnerability is OSSA-2026-030?
OSSA-2026-030 is an authorization bypass vulnerability affecting the S3API headers in OpenStack Swift.
5
When was OSSA-2026-030 published?
OSSA-2026-030 was published on August 5, 2026.