Skip to content
OpenAdvisories

Package · PyPI

ironic

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.8
    CVE-2025-44021

    OpenStack Ironic fails to restrict paths used for file:// image URLs

    OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor)…

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI