Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenStack Platform 17.1/openstack-ironic
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties
CVE-2026-54421 · GHSA-J4CW-MCG2-2Q78
Version ranges need review.
ironic
Red Hat OpenShift Container Platform 4/openstack-ironic
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-42510 · GHSA-WQPV-C3PP-3M58
Version ranges need review.
ironic
Red Hat OpenShift Container Platform 4/openstack-ironic
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Ironic has an Incorrect Resource Transfer Between Spheres
CVE-2026-42997 · GHSA-54W4-233H-X86G
Version ranges need review.
ironic-python-agent
Red Hat OpenShift Container Platform 4/openstack-ironic
PyPI
Red Hat
High
Fix reported
2026-09-10
OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image
CVE-2026-48681 · GHSA-9V62-QX4C-44X5
Version ranges need review.
ironic
Red Hat OpenShift Container Platform 4/openstack-ironic
PyPI
Red Hat
Medium
Fix reported
2026-07-23
OpenStack Ironic allows Boot Script Injection
CVE-2026-46447 · GHSA-JRH2-F5JC-XPGR
Version ranges need review.
ironic
Red Hat OpenShift Container Platform 4/openstack-ironic
PyPI
Red Hat
Medium
Fix reported
2026-07-23
OpenStack Ironic fails to restrict paths used for file:// image URLs
CVE-2025-44021 · GHSA-Q3M2-CRGQ-5P3Q
Version ranges need review.
ironic
Red Hat OpenShift Container Platform 4/openstack-ironic
PyPI
Red Hat
Low
Fix reported
2026-06-10
openstack-ironic: openstack-ironic: Denial of Service via decompression bomb in configdrive
CVE-2026-115638
Red Hat OpenShift Container Platform 4/openstack-ironic
Red Hat OpenStack Platform 13 (Queens)/openstack-ironic
Red Hat
Medium
No fix reported
Not recorded
openstack-ironic: ironic: Sensitive information disclosure via arbitrary PXE template path
CVE-2026-44917
Red Hat OpenShift Container Platform 4/openstack-ironic
Red Hat OpenStack Platform 13 (Queens)/openstack-ironic
Red Hat
Medium
No fix reported
Not recorded
openstack-ironic: Prevent rehoming resources to nodes with different owner
CVE-2026-44918
Red Hat OpenShift Container Platform 5/openstack-ironic
Red Hat OpenStack Platform 17.1/openstack-ironic
Red Hat
High
No fix reported
Not recorded
ironic: OpenStack Ironic: Information disclosure via crafted request
CVE-2026-71201
Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel8-operator
Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel9-operator
Red Hat
Medium
No fix reported
Not recorded
ironic: OpenStack Ironic: Information disclosure via unexpected credential transmission
CVE-2026-90461
Red Hat OpenShift Container Platform 4/openshift4/ose-ironic-rhel9
Red Hat OpenShift Container Platform 4/openstack-ironic
Red Hat
Medium
No fix reported
Not recorded
openstack-ironic: openstack-ironic: maintenance state update bypasses set_maintenance policy via generic PATCH
CVE-2026-89419
Red Hat OpenShift Container Platform 4/openshift4/ose-ironic-rhel9
Red Hat OpenShift Container Platform 4/openstack-ironic
Red Hat
Medium
No fix reported
Not recorded
openstack-ironic: openstack-ironic: Redfish vendor_passthru subscription id path traversal
CVE-2026-90458
Red Hat OpenShift Container Platform 4/openstack-ironic
Red Hat OpenStack Platform 13 (Queens)/openstack-ironic
Red Hat
Medium
No fix reported
Not recorded
