CVE-2026-46448

Description

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

Affected Platforms

Weakness Type

CWE-669

References

• https://bugs.launchpad.net/nova/+bug/2151252
• https://www.openwall.com/lists/oss-security/2026/06/16/5
• http://www.openwall.com/lists/oss-security/2026/06/16/5
• https://bugs.launchpad.net/nova/+bug/2151252