A vulnerability categorized as critical has been discovered in OpenStack Nova up to 30.2.1/31.2.0/32.1.0. This affects an unknown part of the component qemu-img. The manipulation results in stack-based buffer overflow.

This vulnerability is identified as CVE-2026-24708. The attack can only be performed from the local network. There is not any exploit available.

It is advisable to upgrade the affected component.