PT-2026-38679 · Openstack · Openstack Ironic

Dmitry Tantsur + 1 · Published 2026-05-08 · Updated 2026-05-20 · CVE-2026-44916

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 36.0

Description In OpenStack Ironic, the ks template variable within instance info is rendered without sandboxing. Sandboxing is a security mechanism that isolates executing code to prevent it from accessing or modifying unauthorized parts of the system.

Recommendations Update to a version later than 35.x. As a temporary workaround, restrict access to the ks template variable within instance info to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2026-44916

Affected Products

Openstack Ironic

References · 16

• https://ubuntu.com/security/CVE-2026-44916 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-44916 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-44916 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-44916 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44916 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-44916 · Vendor Advisory
• https://review.opendev.org/c/openstack/ironic/+/987514 · Note
• https://twitter.com/CVEnew/status/2053174693851533504 · Twitter Post
• https://t.me/CVEtracker/53098 · Telegram Post
• https://t.me/cveNotify/164264 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2052663351373660289 · Twitter Post
• https://twitter.com/oss_security/status/2055159942340890852 · Twitter Post
• https://bugs.launchpad.net/ironic/+bug/2148307 · Note
• http://openwall.com/lists/oss-security/2026/05/11/7 · Note
• https://t.me/cveNotify/163147 · Telegram Post