CVE-2026-44917: [OSSA-2026-019] Ironic: File Extraction from conductor via pxe_template (CVE-2026-44917)
Last updated 6 June 2026
Other sources
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ironicto a version that resolves this vulnerability.Fixed in 1:21.4.4-0+deb12u1Fixed in 1:29.0.5-0+deb13u2 - Upgrade
Upgrade
OpenStack Ironicto a version that resolves this vulnerability.Fixed in 35.0.2Patch OSSA-2026-019
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44917?
The severity of CVE-2026-44917 is rated medium with a score of 4.9.
How do I fix CVE-2026-44917?
To fix CVE-2026-44917, upgrade to OpenStack Ironic version 35.0.2 or later.
What type of vulnerability is CVE-2026-44917?
CVE-2026-44917 is a file extraction vulnerability that allows unauthorized reading of local files.
Who is affected by CVE-2026-44917?
CVE-2026-44917 affects authenticated project admins or managers using OpenStack Ironic before version 35.0.2.
What can an attacker do with CVE-2026-44917?
An attacker can read local files on the Ironic conductor, potentially exposing sensitive information.