Ironic vulnerabilities

3 known vulnerabilities in Ironic from OpenStack. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Ironic: Improper Protection of Alternate Path

  CVE-2026-54423Jul 10, 2026OpenStack

  In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.

• 7.5 High severity

  Ironic: Allocation of Resources Without Limits or Throttling

  CVE-2026-50589Jun 5, 2026OpenStack

  In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.

• 7.7 High severity

  Ironic: Incorrect Resource Transfer Between Spheres

  CVE-2026-42997May 5, 2026OpenStack

  An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStac