CVE-2011-4596: Openstack Nova

Medium severity, CVSS 6.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.

Affected products

• Openstack Nova: from 2011.3, before 2011.3.1 (fixed in 2011.3.1)

Published 2011-12-23. Last modified 2026-06-16.