PT-2026-37211 · Openstack · Openstack Ironic

Dmitry Tantsur + 1 · CVE-2026-42997 · Published 2026-05-05 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 26.1.6 OpenStack Ironic versions prior to 29.0.5 OpenStack Ironic versions prior to 32.0.1 OpenStack Ironic versions prior to 35.0.1

Description An issue in idrac allows a user invoking molds during import to request that authorization be sent to a remote endpoint. This can result in the forwarding of basic credentials configured for molds storage or a time-limited Keystone token, which grants access to all OpenStack services that Ironic is authorized to use.

Recommendations Update to version 26.1.6. Update to version 29.0.5. Update to version 32.0.1. Update to version 35.0.1.

Exploit

Fix

Weakness Enumeration

CWE-669

CWE-201

Related Identifiers

CVE-2026-42997

GHSA-54W4-233H-X86G

PYSEC-2026-2526

Affected Products

Openstack Ironic

References · 26

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42997.json · Exploit
• https://security.openstack.org/ossa/OSSA-2026-010.html · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2526 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-42997 · Security Note
• http://openwall.com/lists/oss-security/2026/05/05/10 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-42997 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-54w4-233h-x86g · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-42997 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:39811 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-42997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42997 · Security Note
• https://osv.dev/vulnerability/CVE-2026-42997 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42997 · Vendor Advisory
• https://openwall.com/lists/oss-security/2026/05/05/10 · Patch
• https://github.com/openstack/ironic-python-agent · Note