PT-2026-46139 · Openstack+2 · Openstack Ironic+2

Dmitry Tantsur + 1 · CVE-2026-48681 · Published 2026-06-04 · Updated 2026-06-11

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 35.0.2

Description An issue exists where a crafted ISO image can lead to file overwrite via directory traversal during the deployment process. Directory traversal is a technique that allows an attacker to access and manipulate files or directories outside the intended folder by using special character sequences.

Recommendations Update to version 35.0.2.

Fix

DoS

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-48681

GHSA-9V62-QX4C-44X5

USN-8421-1

Affected Products

Linuxmint

Openstack Ironic

Ubuntu

References · 19

• https://cve.org/CVERecord?id=CVE-2026-48681 · Security Note
• https://ubuntu.com/security/CVE-2026-46447 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-48681 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8421-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-48681 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44917 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8421-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48681 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-48681 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9v62-qx4c-44x5 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-48681 · Vendor Advisory
• https://github.com/openstack/ironic · Note
• https://openwall.com/lists/oss-security/2026/06/03/12 · Note
• http://openwall.com/lists/oss-security/2026/06/03/12 · Note
• https://t.me/cveNotify/165908 · Telegram Post