Skip to content
OpenAdvisories

Product · OpenStack

Ironic

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.0
    CVE-2026-44916

    In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered wi…

    OpenStack Ironic ironic ironic Debian Ubuntu
  • Low 2.8
    CVE-2025-44021

    OpenStack Ironic fails to restrict paths used for file:// image URLs

    OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor)…

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI