{"id":"CVE-2026-71195","kind":"vulnerability","aliases":["CVE-2026-71195"],"related":[],"title":"OpenStack Manila: any project member can control other tenants' public shares","description":"In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual owner. This affects the following operations: allow_access: grant data-plane read/write access to another tenant's share; deny_access: revoke the owner's existing access rules; update_access: escalate access level (e.g., ro to rw); create_share_backup: exfiltrate share data via a backup created under the attacker's project; soft_delete: move a foreign share to the recycle bin; restore: interfere with the owner's deletion workflow; export location metadata: create, update, and delete metadata on foreign export locations; access rule listing: disclose IPs, usernames, and CephFS keys. Any authenticated project member can exploit these operations on any public share. The share UUID is visible since the share is public.","summary":"OpenStack Manila API calls on public shares authorize against the caller's own project and never re-check the share's owner. Any authenticated project member can grant, deny or escalate access rules, read access rules (IPs, usernames, CephFS keys), back up, soft-delete or restore another tenant's public share. Separately, the export-location metadata API does not scope its lookup to the share in the request, so one project can read, change or delete another's metadata. Two issues share this CVE; the metadata one is easier to exploit with public shares.","severity":"critical","cvss":9.9,"epss":0.00484,"exploited":false,"exploited_at":null,"products":[{"name":"manila","fixed":["20.0.3","21.0.3","22.0.2","23.0.1"],"affected":">=1.0.0 <20.0.3, >=21.0.0 <21.0.3, >=22.0.0 <22.0.2, ==23.0.0","ecosystem":"openstack"}],"ecosystems":["openstack"],"tags":["cephfs","infrastructure","manila","openstack","self-hosted","shared-file-storage"],"not_affected_if":["managed-hosting","no-public-shares","single-tenant"],"how_to_check":"Run 'pip show manila' or 'manila-manage --version' on API nodes and compare against the fixed versions. You are exposed if you run Manila at any version below 20.0.3, 21.0.3, 22.0.2 or 23.0.1 (the advisory's affects ranges). The public-share issues need shares with is_public=true: run 'openstack share list --all-projects --public'. The metadata issue affects any deployment that uses export-location metadata.","fix":"Upgrade to Manila 23.0.1, 22.0.2, 21.0.3 or 20.0.3. Backport patches are in Gerrit (review.opendev.org/1011478, 1011479, 1011481, 1011482, 1011483). Until then, set shares to private. If CephFS keys may have been read, rotate them and review the access rules.","status":"open","published_at":"2026-10-21T06:16:49+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","triaged_at":"2026-10-23T22:33:20+00:00","updated_at":"2026-10-24T13:15:54+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-10-23T22:33:20Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade OpenStack Manila to 23.0.1 or later.","reach":"network","title":"OpenStack Manila: any project member can control other tenants' public shares","impact":"high","summary":"Before 23.0.1, several Manila API calls on public shares skip the check that the caller owns the share. An authenticated user in any project can grant or revoke share access, read access rules including CephFS keys, create backups of foreign shares, and delete or restore them.","category":"infrastructure","who_cares":["openstack","manila","cephfs","self-hosted"],"confidence":0.8,"needs_auth":"yes","worst_case":"Any project member reads or takes over other tenants' shares and CephFS keys","analyst_note":"Confirm the exact affected version range and whether the fix is backported to older stable branches; check the OpenStack advisory referenced by NVD.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-public-shares","single-tenant"],"user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"critical"},"cost_usd":0.000501,"input_tokens":3141,"output_tokens":374,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Confirm the exact affected version range and whether the fix is backported to older stable branches; check the OpenStack advisory referenced by NVD.","search":"'-2026':13A,16A '-71195':14A,17A '23.0.1':131C 'access':62B,65B,182C,188C,195C,201C,204C,206C,257C 'actual':174C 'affect':177C 'allow':181C 'anoth':78B,109B,190C 'api':32B,89B,134C,149C 'attack':224C 'authent':54B,267C 'author':37B,151C,169C 'back':71B 'backup':214C,220C 'bin':236C 'call':33B 'caller':40B,144C,155C 'cephf':19B,69B,264C 'chang':106B 'check':48B 'context':159C 'control':7A,150C 'creat':212C,221C,248C 'cve':12A,15A,116B 'data':185C,217C 'data-plan':184C 'delet':75B,108B,228C,243C,251C 'deni':59B,194C 'disclos':260C 'e.g':208C 'easier':121B 'escal':61B,205C 'exfiltr':215C 'exist':200C 'exploit':123B,271C 'export':86B,245C,255C 'export-loc':85B 'file':28B 'follow':179C 'foreign':163C,231C,254C 'grant':58B,183C 'host':25B 'infrastructur':20B 'interfer':238C 'ip':67B,261C 'issu':113B 'key':70B,265C 'level':207C 'list':259C 'load':161C 'locat':87B,246C,256C 'lookup':94B 'manila':2A,18A,21B,31B,129C,133C 'member':5A,56B,269C 'metadata':88B,111B,118B,247C,252C 'move':229C 'multipl':132C 'never':45B 'one':102B,119B 'openstack':1A,22B,30B,128C 'oper':135C,152C,180C,273C 'own':145C 'owner':52B,175C,198C,241C 'plane':186C 'project':4A,43B,55B,103B,158C,226C,268C 'public':10A,35B,81B,125B,137C,164C,276C,287C 're':47B,168C 're-author':167C 're-check':46B 'read':64B,105B 'read/write':187C 'recycl':235C 'request':100B 'restor':77B,237C 'revok':196C 'ro':209C 'rule':63B,66B,202C,258C 'rw':211C 'scope':92B 'self':24B 'self-host':23B 'separ':83B 'share':11A,27B,36B,50B,82B,97B,114B,126B,138C,147C,165C,172C,193C,213C,216C,232C,277C,279C,285C 'shared-file-storag':26B 'sinc':283C 'soft':74B,227C 'soft-delet':73B 'storag':29B 'tenant':9A,79B,191C 'two':112B 'updat':203C,249C 'usernam':68B,262C 'uuid':280C 'verifi':141C 'via':218C 'visibl':282C 'without':166C 'workflow':244C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T06:16:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"cve@mitre.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-71195","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71195","severity":null,"published_at":"2026-10-21T06:16:49+00:00","modified_at":"2026-10-22T17:36:46+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-71195:316","url":null,"severity":null,"published_at":"2026-10-23T22:51:59+00:00","modified_at":"2026-10-23T22:51:59+00:00","first_seen_at":"2026-10-23T22:51:59+00:00","fetched_at":"2026-10-23T22:51:59+00:00","note":"Read OSSA-2026-046 (primary): affects Manila >=1.0.0 <20.0.3, >=21.0.0 <21.0.3, >=22.0.0 <22.0.2, ==23.0.0; fixes backported to 2025.1 through 2026.2 stable branches. No exploitation or PoC found; community discussion not searched. 20.0.3 release not confirmed in the Gerrit release commit (it lists 23.0.1, 22.0.2, 21.0.3)."},{"source":"epss","external_id":"CVE-2026-71195","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-71195","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[{"id":1632,"url":"https://security.openstack.org/ossa/OSSA-2026-046.html","title":"OSSA-2026-046: Manila allows cross-project public-share and export-metadata changes","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1633,"url":"https://review.opendev.org/q/31b856b2a4b37b681410f154a52861a5dc1b889e","title":"[security] Release manila 23.0.1, 22.0.2, 21.0.3","kind":"release","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":1634,"url":"https://www.openwall.com/lists/oss-security/2026/10/20/18","title":"oss-security: OSSA-2026-046 Manila (CVE-2026-71195)","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}