CVE-2026-71190

{
  "id": "CVE-2026-71190",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-05T06:16:40.023",
  "lastModified": "2026-10-24T15:10:00.190",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The \"qdtext\" pattern (?:[^\"]|\\\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can exhaust all proxy worker threads, resulting in a complete denial of service."
    },
    {
      "lang": "es",
      "value": "En OpenStack Swift hasta 2.38.0, el analizador del encabezado Accept del servidor proxy contiene una expresión regular vulnerable a retroceso catastrófico (ReDoS). El patrón ’qdtext’ (?:[^”]|\\\\.)* permite a un atacante remoto no autenticado enviar un encabezado Accept manipulado que causa un consumo exponencial de CPU en el proceso de trabajo del proxy. Una carga útil de 32 pares de barra invertida-carácter excede los 30 segundos de tiempo de CPU. No se requiere autenticación. Solicitudes repetidas pueden agotar todos los hilos de trabajo del proxy, lo que resulta en una denegación de servicio completa."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "OpenStack",
          "product": "Swift",
          "defaultStatus": "unaffected",
          "repo": "https://opendev.org/openstack/swift",
          "versions": [
            {
              "version": "1.9.1",
              "lessThan": "2.35.4",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.36.0",
              "lessThan": "2.36.3",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.37.0",
              "lessThan": "2.37.3",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.38.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 8.7,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-06T13:02:38.990835Z",
          "id": "CVE-2026-71190",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1333"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://launchpad.net/bugs/2158771",
      "source": "[email protected]"
    },
    {
      "url": "https://openwall.com/lists/oss-security/2026/07/28/27",
      "source": "[email protected]"
    },
    {
      "url": "https://security.openstack.org/ossa/OSSA-2026-031.html",
      "source": "[email protected]"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/08/05/19",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}