OpenStack Ironic vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202617

Newest CVEs

• CVE-2026-90458

  OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

  OpenStack · Ironic

  Medium5.4
• CVE-2026-89419

  OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using…

  OpenStack · Ironic

  Medium5.0
• CVE-2026-115638

  OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.

  OpenStack · Ironic

  Medium4.3
• CVE-2026-90461

  OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

  OpenStack · Ironic

  Medium6.3
• CVE-2026-74250

  In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect…

  OpenStack · Ironic

  Medium6.3
• CVE-2026-71201

  In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another…

  OpenStack · Ironic

  Medium5.0
• CVE-2026-54423

  In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to…

  OpenStack · Ironic

  High8.2
• CVE-2026-44918

  OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

  OpenStack · Ironic

  Medium5.5
• CVE-2026-54421

  In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted…

  OpenStack · Ironic

  Medium6.8
• CVE-2026-50589

  In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and…

  OpenStack · Ironic

  Medium5.3