Critical Vulnerability in OpenStack Manila: CVE-2026-71195
A critical vulnerability (CVE-2026-71195) with a CVSS score of 9.9 affects OpenStack Manila versions prior to 23.0.1. The vulnerability allows any authenticated project member to exploit multiple Manila API operations on public shares without verifying ownership, leading to potential data exfiltration, access escalation, and denial of service. Affected versions include OpenStack Manila 1.0.0 to 22.0.2 and 23.0.0. Immediate patching is recommended.