CVE-2016-4972

CRITICAL

OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8....

Affects 4 products across 1 vendor.

CVSS 3.09.8
EPSS3.2%
Percentile88th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-20: Improper Input Validation

Software does not validate or incorrectly validates input, allowing attackers to craft data processed in unintended ways.

Related Attack Patterns (CAPEC)
CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
via CWE-20
CAPEC-7 Blind SQL Injection
via CWE-20
CAPEC-8 Buffer Overflow in an API Call
via CWE-20
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-20
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-20
Show all 51
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2016. A critical vulnerability affects Openstack systems (CVE-2016-4972). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2016-GLOBAL-254155-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2016-4972?
This vulnerability was disclosed in 2016. A critical vulnerability affects Openstack systems (CVE-2016-4972). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2016-4972?
CVE-2016-4972 has CVSS 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 3.2%.
Is CVE-2016-4972 actively exploited?
No confirmed active exploitation of CVE-2016-4972 as of 2026-09-25.
How do I remediate CVE-2016-4972?
Priority: MEDIUM. PSIRT: [email protected]
What systems are affected by CVE-2016-4972?
CVE-2016-4972 affects Openstack Mitaka-Murano, Murano, Murano-Dashboard, Python-Muranoclient.
Vulnerability Details
CVE IDCVE-2016-4972
BSIDBS-2016-GLOBAL-254155-C BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2016-09-26
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
Improper Input Validation
SourceNVD
Official Description

OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Openstack Mitaka-Murano ≤ 2.0.0
Openstack Murano ≤ 1.0.2
Openstack Murano-Dashboard ≤ 1.0.2
Openstack Python-Muranoclient ≤ 0.7.2
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3671 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash7da185b4f1298d814225fafc7c27d3048e9555c954edd3c7efc6f6e21ae59ff1268aac544478a0615790e19fc32aba363464ab3a0ae0d9c92456c60a6b1c317e
Related CVEs affecting Openstack
CVE-2025-59823 9.9 Project Gardener implements the automated management and operation of Kuberne... CVE-2026-22797 9.9 An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 bef... CVE-2020-26943 9.9 An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, an... CVE-2017-18017 9.8 The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux k... CVE-2012-4406 9.8 OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the ...
View all Openstack CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →