A server‑side request forgery vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multiple_locations option is enabled, an authenticated attacker can send a crafted PATCH request that modifies the locations attribute of an image that is in the queued state. This manipulation allows the attacker to cause the Glance service to issue internal HTTP requests controlled by the attacker, potentially accessing sensitive resources or leaking internal network information. The weakness is a classic SSRF flaw (CWE-918) that can compromise confidentiality and integrity of internal services.

OpenStack Glance Image API version 2 is affected when the show_multiple_locations configuration option is enabled in glance‑api.conf. The vulnerability has no specific release numbers listed, so any deployment running Glance with v2 of the Image API and with this option enabled is potentially vulnerable.

The CVSS score is 8.1, and the EPSS score is < 1%. Exploitation requires authentication to Glance and the ability to modify an image location attribute. While the exploitation vector is internal to Glance, the SSRF payload can reach internal network endpoints that Glance can access, which may include databases or metadata services. The vulnerability is not listed in the CISA KEV catalog, suggesting no widely known exploits yet, but the lack of a publicly available exploit does not reduce the potential impact. Systems should treat this as a moderate to high risk until a patch is released.