PT-2026-37211 · Openstack · Openstack Ironic

Dmitry Tantsur + 1 · Published 2026-05-05 · Updated 2026-05-06 · CVE-2026-42997

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 26.1.6 OpenStack Ironic versions prior to 29.0.5 OpenStack Ironic versions prior to 32.0.1 OpenStack Ironic versions prior to 35.0.1

Description An issue in idrac allows a user invoking molds during import to request that authorization be sent to a remote endpoint. This can result in the forwarding of basic credentials configured for molds storage or a time-limited Keystone token, which grants access to all OpenStack services that Ironic is authorized to use.

Recommendations Update to version 26.1.6. Update to version 29.0.5. Update to version 32.0.1. Update to version 35.0.1.

Fix

Weakness Enumeration

CWE-669

Related Identifiers

CVE-2026-42997

GHSA-54W4-233H-X86G

Affected Products

Openstack Ironic

References · 15

• https://security-tracker.debian.org/tracker/CVE-2026-42997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42997 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-42997 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-42997 · Security Note
• https://ubuntu.com/security/CVE-2026-42997 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-54w4-233h-x86g · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-42997 · Vendor Advisory
• https://github.com/openstack/ironic-python-agent · Note
• https://t.me/cveNotify/162290 · Telegram Post
• https://bugs.launchpad.net/ironic/+bug/2148317 · Note
• https://openwall.com/lists/oss-security/2026/05/05/10 · Note
• https://security.openstack.org/ossa/OSSA-2026-010.html · Note
• https://twitter.com/infoflowcloud/status/2051742925856313759 · Twitter Post
• https://twitter.com/CVEnew/status/2051741667619733581 · Twitter Post
• http://openwall.com/lists/oss-security/2026/05/05/10 · Note