Skip to content
OpenAdvisories

Package · PyPI

ironic-python-agent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.7
    CVE-2026-42997

    OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

    An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenSta…

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI
  • High 8.0
    CVE-2026-43003

    OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

    An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

    OpenStack ironic-python-agent ironic ironic-python-agent Debian Ubuntu PyPI