PT-2026-40843 · Openstack · Openstack Ironic

Erichen + 1 · Published 2026-05-14 · Updated 2026-07-13 · CVE-2026-44919

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to a3f6d73

Description An infinite loop can occur during image handling when checksum calculations are performed using the 'file:///dev/zero' URL.

Recommendations Update to version a3f6d73 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-696

Related Identifiers

CVE-2026-44919

GHSA-4G73-W726-53H3

PYSEC-2026-2524

Affected Products

Openstack Ironic

References · 18

• 🔥 https://bugs.launchpad.net/ironic/+bug/2150332 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-44919 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2524 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4g73-w726-53h3 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-44919 · Vendor Advisory
• https://opendev.org/openstack/ironic/commit/a3f6d735ac3642ab95b49142c7305f072ae748d0 · Patch
• https://ubuntu.com/security/CVE-2026-44919 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-44919 · Security Note
• https://security.openstack.org/ossa/OSSA-2026-013.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-44919 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44919 · Security Note
• https://twitter.com/VulmonFeeds/status/2054763037328871476 · Twitter Post
• https://opendev.org/openstack/ironic · Note
• https://pypi.org/project/ironic · Note
• https://t.me/CVEtracker/53732 · Telegram Post