OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-42510 · ADVISORY
• bugs.launchpad.net/ironic/+bug/2148331 · WEB
• openstack/ironic · PACKAGE
• security.openstack.org/ossa/OSSA-2026-008.html · WEB
• openwall.com/lists/oss-security/2026/04/30/1 · WEB
• openwall.com/lists/oss-security/2026/08/19/6
• pypi.org/project/ironic · PACKAGE
• GitHub Advisory GHSA-wqpv-c3pp-3m58 · ADVISORY

Autres vulnérabilités de ironic

• CVE-2026-54421MOYENNE 6.8In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return…
• CVE-2026-50589ÉLEVÉE 7.5In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or J…
• CVE-2026-48681ÉLEVÉE 8.1OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.
• CVE-2026-46447ÉLEVÉE 7.7OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info…
• CVE-2026-44919MOYENNE 6.5In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///…