Skip to content
OpenAdvisories

Package · Debian

ironic

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2026-54423

    In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface …

    OpenStack Ironic ironic ironic Debian Ubuntu
  • High 7.7
    CVE-2026-42997

    OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

    An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenSta…

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI
  • High 8.0
    CVE-2026-43003

    OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

    An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

    OpenStack ironic-python-agent ironic ironic-python-agent Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-4985

    OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor

    The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node…

    ironic ironic ironic Debian Ubuntu PyPI