Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 8, 2026 · NIST NVD

   Detected

   Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor. Due to missing file name sanitization, an attacker can register malicious templates to execute arbitrary code on the KVM hosts. This can result in the compromise of resource integrity and confidentiality, data loss, denial of service, and ava

2. Jun 17, 2026 · NIST NVD

   Updated

   Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor. Due to missing file name sanitization, an attacker can register malicious templates to execute arbitrary code on the KVM hosts. This can result in the compromise of resource integrity and confidentiality, data loss, denial of service, and ava

Affected

• cpe apache/cloudstackversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-25077

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-25077

  Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor. Due to missing file name sanitization, an attacker can register malicious templates to execute arbitrary code on the KVM h

  nvd.nist.gov

References

• Reference · openwall.com
• Mailing List · lists.apache.org