HASH(0x5630150fd3c8)
Last updated 6 June 2026
An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.
Last updated 6 June 2026
In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.
A client with network access to the ironic-api service can bypass Keystone authentication and retrieve all information about any Node registered with Ironic, if they know (or are able to guess) the MAC address of a network card belonging to that Node, by sending a crafted POST request to the /v1/drivers/$DRIVERNAME/vendorpassthru resource.
The response will include the full Node details, including management passwords, even when /etc/ironic/policy.json is configured to hide passwords in API responses.
This vulnerability has been verified in all currently supported branches (liberty, mitaka, master) and traced back to code introduced in commit 3e568fbbbcc5748035c1448a0bdb26306470797c during the Juno development cycle. Therefore, it is likely that both juno and kilo branches (and their releases) are also affected.
Affected versions: >=2014.2, >=4.0.0 <=4.2.4, >=4.3.0 <=5.1.1
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.
An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.
In OpenStack Ironic 32 through 35.0.1, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.
In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.
In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.
A flaw was reported in Ironic:
Brad Morgan from Rackspace reported a vulnerability in Ironic. To prevent user data leak, Ironic is expected to "clean" a server after use, however that is transparently not happening. Previous tenant's data may be left behind on the disk and may be available to new users. All Ironic setups are affected.
This flaw is reported to affect versions >= 4.2.0 and <= 4.2.1.
Acknowledgements:
Red Hat would like to thank the OpenStack project for reporting this issue. Upstream acknowledges Brad Morgan from Rackspace as the original reporter.
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.
An authenticated project manager can change the node associated with Volume Connectors or Volume Target objects, potentially changing the project permitted to access the object. Volume Connectors contain secrets in environments configuring boot from volume with iSCSI volumes. This is tracked as bug #2150256.
In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.
Last updated 6 June 2026
There's a flaw in Ironic where images may not have their checksum validated before conversion, potentially permitting man-in-the-middle attacks modifying image data.
A client with network access to the ironic-api service can bypass Keystone authentication and retrieve all information about any Node registered with Ironic, if they know (or are able to guess) the MAC address of a network card belonging to that Node, by sending a crafted POST request to the /v1/drivers/$DRIVERNAME/vendorpassthru resource.
The response will include the full Node details, including management passwords, even when /etc/ironic/policy.json is configured to hide passwords in API responses.
This vulnerability has been verified in all currently supported branches (liberty, mitaka, master) and traced back to code introduced in commit 3e568fbbbcc5748035c1448a0bdb26306470797c during the Juno development cycle. Therefore, it is likely that both juno and kilo branches (and their releases) are also affected.
Affected versions: >=2014.2, >=4.0.0 <=4.2.4, >=4.3.0 <=5.1.1
In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instanceinfo['kstemplate'] is rendered without sandboxing.
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
======================================================================= OSSA-2026-008: Command Injection in Ironic IPMI Console Implementations =======================================================================
:Date: April 27, 2026 :CVE: CVE-2026-pending
Affects ~~~~~~~ - Ironic: >=4.3.0 <26.1.6, >=27.0.0 <29.0.5, >=30.0.0 <32.0.1, >=33.0.0 <35.0.1
Description ~~~~~~~~~~~ Dmitry Tantsur and Tuomo Tanskanen from the Metal3.io Security Team reported a vulnerability in Ironic's IPMI console backends. A project manager for the project marked as a node.owner can inject arbitrary commands which a conductor executes on console activation.
No console backends are enabled by default in Ironic. Only installations which have set [conductor]/enabledconsoleinterfaces to enable either ipmitool-shellinabox or ipmitool-socat are vulnerable.
Patches ~~~~~~~ -https://review.opendev.org/c/openstack/ironic/+/986418 (2023.1/antelope (unmaintained)) -https://review.opendev.org/c/openstack/ironic/+/986417 (2024.1/caracal (unmaintained)) -https://review.opendev.org/c/openstack/ironic/+/986363 (2024.2/dalmatian) -https://review.opendev.org/c/openstack/ironic/+/986362 (2025.1/epoxy) -https://review.opendev.org/c/openstack/ironic/+/986361 (2025.2/flamingo) -https://review.opendev.org/c/openstack/ironic/+/986235 (2026.1/gazpacho)
Credits ~~~~~~~ - Dmitry Tantsur from Metal3.io Security Team - Tuomo Tanskanen from Metal3.io Security Team
References ~~~~~~~~~~ -https://launchpad.net/bugs/2148331
Notes ~~~~~ - A CVE request was filed with MITRE on 2026-04-27. - Patches for unmaintained branches are provided as a courtesy. - The ipmitool-shellinabox console interface is already scheduled for removal from Ironic for lack of security support for shellinabox. Security sensitive operators are strongly encouraged to stop use of this console interface immediately.
Thanks,
Jay Faulkner OpenStack Vulnerability Management Team Ironic Security Liason
======================================================================= OSSA-2026-008: Command Injection in Ironic IPMI Console Implementations =======================================================================
:Date: April 27, 2026 :CVE: CVE-2026-42510
Affects ~~~~~~~ Description ~~~~~~~~~~~ Errata ~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/986363 (2024.2/dalmatian) - https://review.opendev.org/c/openstack/ironic/+/986362 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/986361 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/986235 (2026.1/gazpacho)
Credits ~~~~~~~ - Dmitry Tantsur from Metal3.io Security Team - Tuomo Tanskanen from Metal3.io Security Team
References ~~~~~~~~~~ - https://launchpad.net/bugs/2148331 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42510
Notes ~~~~~ - A CVE request was filed with MITRE on 2026-04-27. - Patches for unmaintained branches are provided as a courtesy. - The ipmitool-shellinabox console interface is already scheduled for removal from Ironic for lack of security support for shellinabox. Security sensitive operators are strongly encouraged to stop use of this console interface immediately.
OSSA History ~~~~~~~~~~~~ - 2026-04-29 - Errata 1 - 2026-04-27 - Original Version
-- Goutham Pacha Ravi OpenStack Vulnerability Management Team https://security.openstack.org/vmt.html
========================================================================================================== ==========================================================================================================
:Date: May 05, 2026 :CVE: CVE-2026-42997
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/986815 (2024.2/dalmatian) - https://review.opendev.org/c/openstack/ironic/+/986767 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/986737 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/986725 (2026.1/gazpacho)
Credits ~~~~~~~ - Dmitry Tantsur from Metal3.io Security Team - Tuomo Tanskanen from Metal3.io Security Team
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148317 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42997
Notes ~~~~~ - The molds feature was deprecated in the 2024.1 (Caracal) release and has been removed during development of the 2026.2 (Hibiscus) release.
===================================================================================== =====================================================================================
:Date: May 11, 2026 :CVE: CVE-2026-44916
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/987776 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/987775 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/987774 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/987922 (Bugfix/31.0) - https://review.opendev.org/c/openstack/ironic/+/987921 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/987920 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148307 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44916
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
====================================================================================== ======================================================================================
:Date: May 19, 2026 :CVE: CVE-2026-44919
Affects ~~~~~~~ - Ironic: >=23.0.4 <29.0.6, >=30.0.0 <32.0.2, >=33.0.0 <35.0.2
Description ~~~~~~~~~~~ Erichen of the Institute of Computing Technology at the Chinese Academy of Sciences reported a vulnerability in Ironic's image handling code where an authenticated and appropriately authorized user could request a special device or file path be deployed, where checksum evaluation would occur in advance of file path checking being asserted. This was a change introduced as a follow-up to soften CVE-2024-47211 image handling since "files on disk" are considered artifacts placed by the deployer/manager of the Ironic deployment.
The result was that the user could request a deployment where the requested disk image was a special file, such as "file:///dev/zero", which would consume a conductor thread. This is a direct result of the auto-checksum behavior attempting to checksum the file. restarted.
Any authenticated user with access to write to node.instanceinfo and deploy a node can trigger this DoS.
Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/988357 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/988356 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/988355 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/988325 (2026.2/hibiscus) - https://review.opendev.org/c/openstack/ironic/+/988765 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/988764 (Bugfix/34.0)
Credits ~~~~~~~ References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150332 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44919
Notes ~~~~~ - Operators and vendors who backported https://review.opendev.org/q/Ib2fd5dcbee9a9d1c7e32770ec3d9b6cb20a2e2a titled "Calculate missing checksum for file:// based images" are vulnerable to this issue. Backports were made available to Xena, Wallaby, and Victoria releases which did not land in OpenDev Gerrit. Backports to the Zed, 2023.1, 2023.2, 2024.1, 2024.2, release branches occured and were merged into OpenDev Gerrit, but were not universally released to release branch and maintenance policies of the OpenStack project. The affected product versions range covers these releases as released by the OpenStack community. - Operators or vendors who may have backported patches independently of upstream should take the action of backporting this fix along with ensuring that they have the appropriate fix for OSSA-2025-001, from https://review.opendev.org/q/I2fa995439ee500f9dd82ec8ccfa1a25ee8e1179c if not already backported. - Patches are provided for active Ironic bugfix branches. Bugfix branches will not get an updated release of Ironic. - Patches are provided for unmaintained branches as a courtesy. These branches will not recieve updated releases.
===================================================================== OSSA-2026-019: File Extraction from Ironic conductor via pxetemplate =====================================================================
:Date: June 03, 2026 :CVE: CVE-2026-44917
Affects ~~~~~~~ Description ~~~~~~~~~~~ Ironic intends on completely removing this feature in a future release.
Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/991382 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/991379 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/991376 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/991373 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/991370 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148319 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44917
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
================================================================================ ================================================================================
:Date: June 03, 2026 :CVE: CVE-2026-46447
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/991380 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/991377 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/991374 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/991371 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/991368 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150624 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46447
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches. - This fix removes the ability to put some valid -- but unlikely -- special characters into kernel command line overrides. There is an escape hatch for impacted clouds; setting CONF.conductor.disablekernelparameterparsing to true will restrict Ironic to only blocking the most dangerous, nonsensical special characters at the cost of being less security hardened against future attacks.
==================================================================================== ====================================================================================
:Date: June 03, 2026 :CVE: CVE-2026-48681
Affects ~~~~~~~ Description ~~~~~~~~~~~ Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/991381 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/991378 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/991375 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/991372 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/991369 (Bugfix/34.0)
Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2148333 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48681
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.
================================================================================ ================================================================================
:Date: June 03, 2026 :CVE: CVE-2026-46447
Affects ~~~~~~~ Description ~~~~~~~~~~~ Errata ~~~~~~ The initial patches issued to address the vulnerability would erroneously reject some valid kernel parameters, particularly when URL encoded. These bugs had no detrimental security impact, but may have caused unexpected failures. We apologize for the inconvienience. For a more rapid resolution of failures, operators can set CONF.conductor.disablekernelparameterparsing to false until they can apply the provided patches. applied for proper behavior.
Patches ~~~~~~~ Credits ~~~~~~~ - Dmitry Tantsur from Red Hat - Tuomo Tanskanen from Ericsson Software Technology
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2150624 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46447
Notes ~~~~~ - Releases 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmation) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches. - This fix removes the ability to put some valid -- but unlikely -- special characters into kernel command line overrides. There is an escape hatch for impacted clouds; setting CONF.conductor.disablekernelparameterparsing to true will restrict Ironic to only blocking the most dangerous, nonsensical special characters at the cost of being less security hardened against future attacks.
OSSA History ~~~~~~~~~~~~ - 2026-06-15 - Errata 1 - 2026-06-03 - Original Version
======================================================================================== ========================================================================================
:Date: June 16, 2026 :CVE: CVE-2026-54421
Affects ~~~~~~~ Description ~~~~~~~~~~~ Tuomo Tanskanen (Ericsson Software Technology) and Dmitry Tantsur (Red Hat) of the Metal3.io Security Team discovered a vulnerability in Ironic API RBAC handling, where a user with a valid token and credentials to send a POST or PATCH request to /v1/volume/targets can have potentially sensitive properties returned in the response unredacted, such as iSCSI credentials.
Patches ~~~~~~~ - https://review.opendev.org/c/openstack/ironic/+/992326 (2025.1/epoxy) - https://review.opendev.org/c/openstack/ironic/+/992325 (2025.2/flamingo) - https://review.opendev.org/c/openstack/ironic/+/992321 (2026.1/gazpacho) - https://review.opendev.org/c/openstack/ironic/+/992323 (Bugfix/33.0) - https://review.opendev.org/c/openstack/ironic/+/992322 (Bugfix/34.0)
Credits ~~~~~~~ - Tuomo Tanskanen from Ericsson Software Technology - Dmitry Tantsur from Red Hat
References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/2155049 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54421
Notes ~~~~~ - The vulnerable code path has existed since Ironic 9.0.0 (OpenStack Pike), however, this could only be considered an escalation of privileges after Ironic 17.0.0 (OpenStack Wallaby), when Ironic introduced the ability for project-scoped users to interact via the owner/lessee model. - Branches for 2024.1 (caracal) and 2023.1 (antelope) are unmaintained. Patches are provided as a courtesy. Releases 2023.2 (bobcat) and 2024.2 (dalmatian) are end of life and have not had patches provided. See https://releases.openstack.org for more information on supported releases. - Ironic bugfix branch patches will be available in git for interested operators. We will not perform an additional release from these branches.