In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.
============================================================ OSSA-2026-033: Portgroup shard filter bypasses project scope ============================================================
:Date: August 05, 2026 :CVE: CVE-2026-71201
Affects ~~~~~~~ - Ironic: >=34.0.0 <35.0.2, >=36.0.0 <38.0.1
Description ~~~~~~~~~~~ Chen YuXiang of Institute of Computing Technology, Chinese Academy of Sciences reported an issue in Ironic's API. When a project reader requests a list of portgroups filtered by shard, all portgroups in that shard are returned, not just those in their project.
This is a similar vulnerability to the one originally advisoried in OSSA-2026-026 -- that issue impacted ports; this impacts portgroups.
Patches ~~~~~~~ - https://review.opendev.org/999762 (2026.1/gazpacho) - https://review.opendev.org/999656 (2026.2/hibiscus (development)) - https://review.opendev.org/999765 (Bugfix/34.0) - https://review.opendev.org/999764 (Bugfix/37.0) - https://review.opendev.org/999763 (Bugfix/38.0)
Credits ~~~~~~~ References ~~~~~~~~~~ - https://launchpad.net/bugs/2162715 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71201
Notes ~~~~~ - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.
================================================================================== ==================================================================================
:Date: July 08, 2026 :CVE: CVE-2026-44918
Affects ~~~~~~~ Description ~~~~~~~~~~~ Dmitry Tantsur (Red Hat) and Tuomo Tanskanen (Ericsson Software Technology) from the Metal3.io Security Team reported a vulnerability in Ironic's access control code.
This OSSA represents multiple related vulnerabilities in Ironic RBAC. An authenticated project manager can change the node associated with Volume Connectors or Volume Target objects, potentially changing the project permitted to access the object. Volume Connectors contain secrets in environments configuring boot from volume with iSCSI volumes. This is tracked as bug #2150256.
Objects reparented in this manner cannot be detected via inspection of the data. Operators who are concerned they may have had this occur are encouraged to perform a basic audit of node configuration, for instance, insuring the expected number of volume targets, and volume connectors are present.
Additionally, a project manager with the ability to create nodes can use the UUID of a node not owned by their project as a parent node when creating a new node. This mismatched child node can then be used to impact operations on the parent, such as forcing it to power on. This is tracked as bug #2150450.
Ironic now specifically checks, and requires node parents and children to have matching node.owner values. This patch contains an enhancement to Ironic's upgrade check to detect this mismatched state. Operators can use the provided ironic-status upgrade check to identify misconfigured nodes.
Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/996478 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/996476 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/996469 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/996462 (2026.2/hibiscus) - https://review.opendev.org/c/openstack/ironic/+/996474 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/996471 (Bugfix/34.0) - https://review.opendev.org/c/openstack/ironic/+/996464 (Bugfix/37.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150256 - https://bugs.launchpad.net/ironic/+bug/2150450 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44918
Notes ~~~~~ - Volume Targets and Volume Connectors only contain sensitive information in environments utilizing boot-from-volume with iSCSI volumes. - These patches also contain hardening logic to prevent this class of vulnerability in Port and Portgroup objects. This is a defense in depth measure to provide consistent errors at the API level for invalid data. - Branch 2024.1/caracal is unmaintained and patches are provided as a courtesy. - Bugfix branches will recieve patches in git but will not recieve a updated release.
======================================================== OSSA-2026-025: RBAC Bypass in IPMI Raw Command Execution ========================================================
:Date: July 08, 2026 :CVE: CVE-2026-54423
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/996477 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/992732 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/996475 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/992719 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/996466 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/992516 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/996473 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/992718 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/996470 (Bugfix/34.0) - https://review.opendev.org/c/openstack/ironic/+/992717 (Bugfix/34.0) - https://review.opendev.org/c/openstack/ironic/+/996463 (Bugfix/37.0) Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericcson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150458 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54423
Notes ~~~~~ - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
An authenticated project manager can change the node associated with Volume Connectors or Volume Target objects, potentially changing the project permitted to access the object. Volume Connectors contain secrets in environments configuring boot from volume with iSCSI volumes. This is tracked as bug #2150256.
HASH(0x5630150fd3c8)
======================================================================================== ========================================================================================
:Date: June 16, 2026 :CVE: CVE-2026-54421
Affects ~~~~~~~ Description ~~~~~~~~~~~ Tuomo Tanskanen (Ericsson Software Technology) and Dmitry Tantsur (Red Hat) of the Metal3.io Security Team discovered a vulnerability in Ironic API RBAC handling, where a user with a valid token and credentials to send a POST or PATCH request to /v1/volume/targets can have potentially sensitive properties returned in the response unredacted, such as iSCSI credentials.
Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/992326 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/992325 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/992321 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/992323 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/992322 (Bugfix/34.0)
Credits ~~~~~~~ - Tuomo Tanskanen from Ericsson Software Technology - Dmitry Tantsur from Red Hat
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2155049 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54421
Notes ~~~~~ - The vulnerable code path has existed since Ironic 9.0.0 (OpenStack Pike), however, this could only be considered an escalation of privileges after Ironic 17.0.0 (OpenStack Wallaby), when Ironic introduced the ability for project-scoped users to interact via the owner/lessee model. - Branches for 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmatian) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
================================================================================ ================================================================================
:Date: June 03, 2026 :CVE: CVE-2026-46447
Affects ~~~~~~~ Description ~~~~~~~~~~~ Errata ~~~~~~ The initial patches issued to address the vulnerability would erroneously reject some valid kernel parameters, particularly when URL encoded. These bugs had no detrimental security impact, but may have caused unexpected failures. We apologize for the inconvienience. For a more rapid resolution of failures, operators can set CONF.conductor.disablekernelparameterparsing to false until they can apply the provided patches. applied for proper behavior.
Patches ~~~~~~~ Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150624 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46447
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches. - This fix removes the ability to put some valid -- but unlikely -- special characters into kernel command line overrides. There is an escape hatch for impacted clouds; setting CONF.conductor.disablekernelparameterparsing to true will restrict Ironic to only blocking the most dangerous, nonsensical special characters at the cost of being less security hardened against future attacks.
OSSA History ~~~~~~~~~~~~ - 2026-06-15 - Errata 1 - 2026-06-03 - Original Version
In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.
In OpenStack Ironic 32 through 35.0.1, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.
In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.
Last updated 6 June 2026
Last updated 6 June 2026
===================================================================== OSSA-2026-019: File Extraction from Ironic conductor via pxetemplate =====================================================================
:Date: June 03, 2026 :CVE: CVE-2026-44917
Affects ~~~~~~~ Description ~~~~~~~~~~~ Ironic intends on completely removing this feature in a future release.
Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/991382 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/991379 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/991376 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/991373 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/991370 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148319 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44917
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
==================================================================================== ====================================================================================
:Date: June 03, 2026 :CVE: CVE-2026-48681
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/991381 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/991378 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/991375 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/991372 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/991369 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148333 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48681
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
================================================================================ ================================================================================
:Date: June 03, 2026 :CVE: CVE-2026-46447
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/991380 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/991377 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/991374 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/991371 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/991368 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150624 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46447
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches. - This fix removes the ability to put some valid -- but unlikely -- special characters into kernel command line overrides. There is an escape hatch for impacted clouds; setting CONF.conductor.disablekernelparameterparsing to true will restrict Ironic to only blocking the most dangerous, nonsensical special characters at the cost of being less security hardened against future attacks.
Last updated 6 June 2026
====================================================================================== ======================================================================================
:Date: May 19, 2026 :CVE: CVE-2026-44919
Affects ~~~~~~~ - Ironic: >=23.0.4 <29.0.6, >=30.0.0 <32.0.2, >=33.0.0 <35.0.2
Description ~~~~~~~~~~~ Erichen of the Institute of Computing Technology at the Chinese Academy of Sciences reported a vulnerability in Ironic's image handling code where an authenticated and appropriately authorized user could request a special device or file path be deployed, where checksum evaluation would occur in advance of file path checking being asserted. This was a change introduced as a follow-up to soften CVE-2024-47211 image handling since "files on disk" are considered artifacts placed by the deployer/manager of the Ironic deployment.
The result was that the user could request a deployment where the requested disk image was a special file, such as "file:///dev/zero", which would consume a conductor thread. This is a direct result of the auto-checksum behavior attempting to checksum the file. restarted.
Any authenticated user with access to write to node.instanceinfo and deploy a node can trigger this DoS.
Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/988357 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/988356 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/988355 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/988325 (2026.2/hibiscus) - https://review.opendev.org/c/openstack/ironic/+/988765 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/988764 (Bugfix/34.0)
Credits ~~~~~~~ References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150332 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44919
Notes ~~~~~ - Operators and vendors who backported https://review.opendev.org/q/Ib2fd5dcbee9a9d1c7e32770ec3d9b6cb20a2e2a titled "Calculate missing checksum for file:// based images" are vulnerable to this issue. Backports were made available to Xena, Wallaby, and Victoria releases which did not land in OpenDev Gerrit. Backports to the Zed, 2023.1, 2023.2, 2024.1, 2024.2, release branches occured and were merged into OpenDev Gerrit, but were not universally released to release branch and maintenance policies of the OpenStack project. The affected product versions range covers these releases as released by the OpenStack community. - Operators or vendors who may have backported patches independently of upstream should take the action of backporting this fix along with ensuring that they have the appropriate fix for OSSA-2025-001, from https://review.opendev.org/q/I2fa995439ee500f9dd82ec8ccfa1a25ee8e1179c if not already backported. - Patches are provided for active Ironic bugfix branches. Bugfix branches will not get an updated release of Ironic. - Patches are provided for unmaintained branches as a courtesy. These branches will not recieve updated releases.
In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.
===================================================================================== =====================================================================================
:Date: May 11, 2026 :CVE: CVE-2026-44916
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/987776 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/987775 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/987774 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/987922 (Bugfix/31.0) - https://review.opendev.org/c/openstack/ironic/+/987921 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/987920 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148307 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44916
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instanceinfo['kstemplate'] is rendered without sandboxing.
An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.
========================================================================================================== ==========================================================================================================
:Date: May 05, 2026 :CVE: CVE-2026-42997
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/986815 (2024.2/dalmatian) - https://review.opendev.org/c/openstack/ironic/+/986767 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/986737 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/986725 (2026.1/gazpacho)
Credits ~~~~~~~ - Dmitry Tantsur from Metal3.io Security Team - Tuomo Tanskanen from Metal3.io Security Team
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148317 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42997
Notes ~~~~~ - The molds feature was deprecated in the 2024.1 (Caracal) release and has been removed during development of the 2026.2 (Hibiscus) release.
An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.
======================================================================= OSSA-2026-008: Command Injection in Ironic IPMI Console Implementations =======================================================================
:Date: April 27, 2026 :CVE: CVE-2026-42510
Affects ~~~~~~~ Description ~~~~~~~~~~~ Errata ~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/986363 (2024.2/dalmatian) - https://review.opendev.org/c/openstack/ironic/+/986362 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/986361 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/986235 (2026.1/gazpacho)
Credits ~~~~~~~ - Dmitry Tantsur from Metal3.io Security Team - Tuomo Tanskanen from Metal3.io Security Team
References ~~~~~~~~~~ - https://launchpad.net/bugs/2148331 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42510
Notes ~~~~~ - A CVE request was filed with MITRE on 2026-04-27. - Patches for unmaintained branches are provided as a courtesy. - The ipmitool-shellinabox console interface is already scheduled for removal from Ironic for lack of security support for shellinabox. Security sensitive operators are strongly encouraged to stop use of this console interface immediately.
OSSA History ~~~~~~~~~~~~ - 2026-04-29 - Errata 1 - 2026-04-27 - Original Version
-- Goutham Pacha Ravi OpenStack Vulnerability Management Team https://security.openstack.org/vmt.html
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.
======================================================================= OSSA-2026-008: Command Injection in Ironic IPMI Console Implementations =======================================================================
:Date: April 27, 2026 :CVE: CVE-2026-pending
Affects ~~~~~~~ - Ironic: >=4.3.0 <26.1.6, >=27.0.0 <29.0.5, >=30.0.0 <32.0.1, >=33.0.0 <35.0.1
Description ~~~~~~~~~~~ Dmitry Tantsur and Tuomo Tanskanen from the Metal3.io Security Team reported a vulnerability in Ironic's IPMI console backends. A project manager for the project marked as a node.owner can inject arbitrary commands which a conductor executes on console activation.
No console backends are enabled by default in Ironic. Only installations which have set [conductor]/enabledconsoleinterfaces to enable either ipmitool-shellinabox or ipmitool-socat are vulnerable.
Patches ~~~~~~~ -https://review.opendev.org/c/openstack/ironic/+/986418 (2023.1/antelope (unmaintained)) -https://review.opendev.org/c/openstack/ironic/+/986417 (2024.1/caracal (unmaintained)) -https://review.opendev.org/c/openstack/ironic/+/986363 (2024.2/dalmatian) -https://review.opendev.org/c/openstack/ironic/+/986362 (2025.1/epoxy) -https://review.opendev.org/c/openstack/ironic/+/986361 (2025.2/flamingo) -https://review.opendev.org/c/openstack/ironic/+/986235 (2026.1/gazpacho)
Credits ~~~~~~~ - Dmitry Tantsur from Metal3.io Security Team - Tuomo Tanskanen from Metal3.io Security Team
References ~~~~~~~~~~ -https://launchpad.net/bugs/2148331
Notes ~~~~~ - A CVE request was filed with MITRE on 2026-04-27. - Patches for unmaintained branches are provided as a courtesy. - The ipmitool-shellinabox console interface is already scheduled for removal from Ironic for lack of security support for shellinabox. Security sensitive operators are strongly encouraged to stop use of this console interface immediately.
Thanks,
Jay Faulkner OpenStack Vulnerability Management Team Ironic Security Liason
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
There's a flaw in Ironic where images may not have their checksum validated before conversion, potentially permitting man-in-the-middle attacks modifying image data.